util linux

Microsoft’s advisory that Azure Linux includes the vulnerable util‑linux library is accurate — but it is not the whole story: the wall (broadcast) bug tracked as CVE‑2024‑28085 is a library / utility flaw that is present in the standard util‑linux packages used across virtually every mainstream...

A newly recorded vulnerability in the util‑linux project — tracked as CVE‑2025‑14104 — permits a heap buffer overread in the setpwnam code path when processing 256‑byte usernames, creating a local denial‑of‑service and potential information‑disclosure hazard for SUID login utilities that write...