CVE-2026-3184

EUVD-2026-18817

03.04.2026, 19:17

A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied remote hostname before setting `PAM_RHOST`. A remote attacker could exploit this by providing a specially crafted hostname, potentially bypassing host-based Pluggable Authentication Modules (PAM) access control rules that rely on fully qualified domain names. This could lead to unauthorized access.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	3.7 LOW	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 36.35%

Affected Products (NVD)

Vendor	Product	Version
kernel	util-linux	-
redhat	hardened_images	-

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

util-linux

bookworm	ignored
bookworm (security)	vulnerable
bullseye	ignored
bullseye (security)	vulnerable
forky	2.42.2-2 fixed
sid	2.42.2-3 fixed
trixie	no-dsa
trixie (security)	vulnerable

Ubuntu Releases

Ubuntu Product

Codename

util-linux

bionic	not-affected
focal	not-affected
jammy	not-affected
noble	not-affected
questing	ignored
resolute	needed
trusty	not-affected
xenial	not-affected

openSUSE / SLES Releases

openSUSE Product

Release

libblkid-devel

suse enterprise desktop 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise sap 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise server 15 SP4	2.37.2-150400.8.41.1 fixed
suse enterprise server 15 SP7	2.40.4-150700.4.10.1 fixed

libblkid-devel-static

suse enterprise desktop 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise sap 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise server 15 SP4	2.37.2-150400.8.41.1 fixed
suse enterprise server 15 SP7	2.40.4-150700.4.10.1 fixed

libblkid1

suse enterprise desktop 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise sap 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise server 12 SP3	2.29.2-3.48.1 fixed
suse enterprise server 15 SP4	2.37.2-150400.8.41.1 fixed
suse enterprise server 15 SP7	2.40.4-150700.4.10.1 fixed

libblkid1-32bit

suse enterprise desktop 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise sap 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise server 12 SP3	2.29.2-3.48.1 fixed
suse enterprise server 15 SP4	2.37.2-150400.8.41.1 fixed
suse enterprise server 15 SP7	2.40.4-150700.4.10.1 fixed

libfdisk-devel

suse enterprise desktop 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise sap 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise server 15 SP4	2.37.2-150400.8.41.1 fixed
suse enterprise server 15 SP7	2.40.4-150700.4.10.1 fixed

libfdisk1

suse enterprise desktop 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise sap 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise server 12 SP3	2.29.2-3.48.1 fixed
suse enterprise server 15 SP4	2.37.2-150400.8.41.1 fixed
suse enterprise server 15 SP7	2.40.4-150700.4.10.1 fixed

libmount-devel

suse enterprise desktop 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise sap 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise server 15 SP4	2.37.2-150400.8.41.1 fixed
suse enterprise server 15 SP7	2.40.4-150700.4.10.1 fixed

libmount1

suse enterprise desktop 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise sap 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise server 12 SP3	2.29.2-3.48.1 fixed
suse enterprise server 15 SP4	2.37.2-150400.8.41.1 fixed
suse enterprise server 15 SP7	2.40.4-150700.4.10.1 fixed

libmount1-32bit

suse enterprise desktop 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise sap 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise server 12 SP3	2.29.2-3.48.1 fixed
suse enterprise server 15 SP4	2.37.2-150400.8.41.1 fixed
suse enterprise server 15 SP7	2.40.4-150700.4.10.1 fixed

libsmartcols-devel

suse enterprise desktop 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise sap 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise server 15 SP4	2.37.2-150400.8.41.1 fixed
suse enterprise server 15 SP7	2.40.4-150700.4.10.1 fixed

libsmartcols1

suse enterprise desktop 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise sap 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise server 12 SP3	2.29.2-3.48.1 fixed
suse enterprise server 15 SP4	2.37.2-150400.8.41.1 fixed
suse enterprise server 15 SP7	2.40.4-150700.4.10.1 fixed

libuuid-devel

suse enterprise desktop 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise sap 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise server 15 SP4	2.37.2-150400.8.41.1 fixed
suse enterprise server 15 SP7	2.40.4-150700.4.10.1 fixed

libuuid-devel-static

suse enterprise desktop 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise sap 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise server 15 SP4	2.37.2-150400.8.41.1 fixed
suse enterprise server 15 SP7	2.40.4-150700.4.10.1 fixed

libuuid1

suse enterprise desktop 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise sap 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise server 12 SP3	2.29.2-3.48.1 fixed
suse enterprise server 15 SP4	2.37.2-150400.8.41.1 fixed
suse enterprise server 15 SP7	2.40.4-150700.4.10.1 fixed

libuuid1-32bit

suse enterprise desktop 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise sap 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise server 12 SP3	2.29.2-3.48.1 fixed
suse enterprise server 15 SP4	2.37.2-150400.8.41.1 fixed
suse enterprise server 15 SP7	2.40.4-150700.4.10.1 fixed

python-libmount

suse enterprise server 12 SP3

2.29.2-3.48.1

fixed

util-linux

suse enterprise desktop 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise sap 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise server 12 SP3	2.29.2-3.48.1 fixed
suse enterprise server 15 SP4	2.37.2-150400.8.41.1 fixed
suse enterprise server 15 SP7	2.40.4-150700.4.10.1 fixed

util-linux-extra

suse enterprise desktop 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise sap 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise server 15 SP7	2.40.4-150700.4.10.1 fixed

util-linux-lang

suse enterprise desktop 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise sap 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise server 12 SP3	2.29.2-3.48.1 fixed
suse enterprise server 15 SP4	2.37.2-150400.8.41.1 fixed
suse enterprise server 15 SP7	2.40.4-150700.4.10.1 fixed

util-linux-systemd

suse enterprise desktop 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise sap 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise server 12 SP3	2.29.2-3.48.1 fixed
suse enterprise server 15 SP4	2.37.2-150400.8.41.1 fixed
suse enterprise server 15 SP7	2.40.4-150700.4.10.1 fixed

util-linux-tty-tools

suse enterprise desktop 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise sap 15 SP7	2.40.4-150700.4.10.1 fixed
suse enterprise server 15 SP7	2.40.4-150700.4.10.1 fixed

uuidd

suse enterprise server 12 SP3	2.29.2-3.48.1 fixed
suse enterprise server 15 SP4	2.37.2-150400.8.41.1 fixed

Azure Linux Releases

Azure Package

Release

util-linux

Azure Linux 3.0

0:2.40.2-4.azl3

fixed

Common Weakness Enumeration

CWE-289 - Authentication Bypass by Alternate Name
The software performs authentication based on the name of a resource being accessed, or the name of the actor performing the access, but it does not properly check all possible names for that resource or actor.

References

https://access.redhat.com/errata/RHSA-2026:7180

https://access.redhat.com/security/cve/CVE-2026-3184

https://bugzilla.redhat.com/show_bug.cgi?id=2442570