Moderate Vulnerability in Coreutils: Heap Buffer Under-Read in GNU Coreutils Sort
Summary
ALSA-2026:33124: Moderate: coreutils security update. Affects coreutils versions < 9.5-8.el10_2. Fixed in 9.5-8.el10_2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Coreutils is a package that contains the GNU Core Utilities, which are essential tools for file manipulation, shell scripting, and text processing in Unix-like operating systems. It combines functionalities from previously separate packages, including fileutils, sh-utils, and textutils. The coreutils package is widely used for its reliability and efficiency in handling basic system tasks. However, it has been identified that certain versions are vulnerable to a heap buffer under-read issue, which can potentially lead to unauthorized data access or system instability.
Vulnerability Detail
The vulnerability identified as CVE-2025-5278 is a heap buffer under-read in the GNU Coreutils sort command, specifically related to key specification. This flaw allows an attacker to read memory locations that should not be accessible, potentially exposing sensitive information. The issue arises from improper handling of memory buffers, which can be exploited in scenarios where untrusted input is processed. The ramifications of this vulnerability can include data leakage and increased risk of further attacks on the system.
How To Fix
Minimum fixed version
9.5-8.el10_2
This is the first release that contains the fix.
sudo dnf update coreutilsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid using the sort command with untrusted input until the package is updated. This can help mitigate the risk of exploitation until a proper fix is applied.
Conclusion
The coreutils package has a moderate vulnerability that can lead to serious security risks if not addressed. Users are strongly advised to update to the patched version to ensure system security and integrity. Utilizing tools like Vulert can help in monitoring for such vulnerabilities effectively.
See every vulnerability recorded for coreutils →
FAQ
CVE-2025-5278 is a vulnerability in the GNU Coreutils sort command that allows for a heap buffer under-read, potentially exposing sensitive data.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected by this vulnerability.
Failure to address this vulnerability may lead to unauthorized access to sensitive information, data leakage, and increased risk of further attacks.
Yes, avoid using the sort command with untrusted input until the coreutils package is updated to the patched version.
You can update the coreutils package by running the command 'sudo yum update coreutils' in your terminal.
Related vulnerabilities
Recent vulnerabilities recorded for coreutils.
