PT-2026-23621 · Unknown · Util-Linux

Published 2026-01-01 · Updated 2026-05-01 · CVE-2026-3184

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions util-linux (affected versions not specified)

Description An access control bypass exists due to improper hostname canonicalization. This issue affects the 'login -h' command and can lead to incorrect access control. The fix ensures correct access control by properly handling full hostname usage for PAM.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-289

Related Identifiers

CVE-2026-3184

ECHO-783B-C2AC-C763

OESA-2026-1532

OESA-2026-1533

OESA-2026-1534

OESA-2026-1535

OESA-2026-1635

OESA-2026-1636

OPENSUSE-SU-2026:10288-1

OPENSUSE-SU-2026:20495-1

RHSA-2026:7180

SUSE-SU-2026:0803-1

SUSE-SU-2026:0856-1

SUSE-SU-2026:0857-1

SUSE-SU-2026:0982-1

SUSE-SU-2026:0987-1

SUSE-SU-2026:1370-1

SUSE-SU-2026:1406-1

SUSE-SU-2026:20664-1

SUSE-SU-2026:20714-1

SUSE-SU-2026:21016-1

SUSE-SU-2026:21158-1

Affected Products

Util-Linux

References · 58

• https://osv.dev/vulnerability/DEBIAN-CVE-2026-3184 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:21158-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1636 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20714-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-3184 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1635 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:7180 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-3184 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1532 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-3184 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-3184 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0856-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10288-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0857-1 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-3184 · Vendor Advisory