util-linux-systemd (SUSE:Linux Enterprise Module for Basesystem 15 SP7) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Basesystem 15 SP7 package util-linux-systemd, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2025-14104 — CVSS 6.1 (medium): A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within…
• CVE-2026-27456 — CVSS 4.7 (medium): util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU (Time-of-Check-Time-of-Use) vulnerability has been…
• CVE-2026-3184 — CVSS 3.7 (low): A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify…