Skip to content
Fencer Vulns
low 3.7

CVE-2026-3184 json

Util-linux: util-linux: access control bypass due to improper hostname canonicalization

published 2026-04-03 7 mo ago modified 2026-11-06 2 d ago also EUVD-2026-18817

cvss
3.7
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.4%
EPSS 0.4% chance of exploitation in 30 days, percentile 38%
public exploits
0
none known

Summary

A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied remote hostname before setting `PAM_RHOST`. A remote attacker could exploit this by providing a specially crafted hostname, potentially bypassing host-based Pluggable Authentication Modules (PAM) access control rules that rely on fully qualified domain names. This could lead to unauthorized access.

Patch / fix

  • Red Hat Red Hat Hardened Images 2.42-7.1.hum1
  • util-linux Debian 14 2.42-1

debian advisories DEBIAN-CVE-2026-3184

  • util-linux Ubuntu 26.04 LTS 2.41.3-3ubuntu2.2

ubuntu advisories UBUNTU-CVE-2026-3184

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • util-linux hummingbird 1 2.42-7.1.hum1
  • util-linux-core hummingbird 1 2.42-7.1.hum1
  • util-linux-i18n hummingbird 1 2.42-7.1.hum1
  • util-linux-script hummingbird 1 2.42-7.1.hum1

red hat advisories RHSA-2026:7180

  • util-linux SLE Module for Basesystem 15 SP7 2.40.4-150700.4.10.1
  • util-linux-systemd SLE Module for Server Applications 15 SP7, SLE Module for Basesystem 15 SP7 2.40.4-150700.4.10.1
  • util-linux SLES 16.0, Linux Micro 6.2, SLES for SAP applications 16.0 2.41.1-160000.3.1
  • util-linux-systemd SLES 16.0, Linux Micro 6.2, SLES for SAP applications 16.0 2.41.1-160000.3.1
  • python-libmount SLES for SAP applications 16.0, SLES 16.0 2.41.1-160000.3.1
  • util-linux SLE Micro 5.2 2.36.2-150300.4.58.1
  • util-linux-systemd SLE Micro 5.2 2.36.2-150300.4.58.1
  • util-linux SLE Micro 5.4, SLE Micro 5.3 2.37.2-150400.8.41.1

suse advisories SUSE-SU-2026:1406-1SUSE-SU-2026:1370-1SUSE-SU-2026:21016-1SUSE-SU-2026:21158-1SUSE-SU-2026:0987-1SUSE-SU-2026:0982-1

  • util-linux openSUSE Leap 16.0 2.41.1-160000.3.1
  • python-libmount openSUSE Leap 16.0 2.41.1-160000.3.1
  • util-linux-systemd openSUSE Leap 16.0 2.41.1-160000.3.1
  • util-linux openSUSE Tumbleweed 2.41.3-4.1

opensuse advisories openSUSE-SU-2026:20495-1openSUSE-SU-2026:10288-1

  • util-linux Azure Linux 3.0 2.40.2-4

azure linux advisories AZL-81911

Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2026-3184 updated cvss 3.7

util-linux: util-linux: Access control bypass due to improper hostname canonicalization

  • Red Hat Hardened Images util-linux 2.42-7.1.hum1, util-linux-core 2.42-7.1.hum1, util-linux-i18n 2.42-7.1.hum1, util-linux-script 2.42-7.1.hum1
    fixed: vendor fix RHSA-2026:7180
  • Red Hat Enterprise Linux 7 uuidd, libuuid, libblkid, libmount, util-linux Red Hat Enterprise Linux 8 uuidd, libuuid, libblkid, libfdisk, libmount, util-linux, +3 more Red Hat Enterprise Linux 9 uuidd, libuuid, libblkid, libfdisk, libmount, util-linux, +4 more Red Hat Enterprise Linux 10 util-linux Red Hat Hardened Images uuidd 2.42-7.1.hum1, libuuid 2.42-7.1.hum1, libblkid 2.42-7.1.hum1, libfdisk 2.42-7.1.hum1, libmount 2.42-7.1.hum1, liblastlog2 2.42-7.1.hum1, +2 more Red Hat OpenShift Container Platform 4 openshift/ose-rhel-coreos-8, openshift/ose-rhel-coreos-9
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
7 mo ago

Exploit prediction

0.44% chance of exploitation in the next 30 days, higher than 38% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
NVD 3.1 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected products

  • Red Hat Red Hat Hardened Images
  • Red Hat Red Hat Enterprise Linux 10
  • Red Hat Red Hat Enterprise Linux 7
  • Red Hat Red Hat Enterprise Linux 8
  • Red Hat Red Hat Enterprise Linux 9
  • Red Hat Red Hat OpenShift Container Platform 4

Classification

Weakness
  • CWE-289 Authentication Bypass by Alternate Name

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.