Moderate Vulnerability in coreutils: Heap Buffer Under-Read in GNU Coreutils sort
Summary
RLSA-2026:69964: Moderate: coreutils security update. Affects coreutils versions < 0:8.30-21.el8_10. Fixed in 0:8.30-21.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The coreutils package contains the GNU Core Utilities, which are essential tools for file manipulation, text processing, and system management in Unix-like operating systems. This package combines functionalities from previously separate packages: GNU fileutils, sh-utils, and textutils. As a fundamental component of many Linux distributions, coreutils is widely used for various command-line operations, making its security critical for system integrity.
Vulnerability Detail
The vulnerability identified as CVE-2025-5278 is a Heap Buffer Under-Read issue in the GNU Coreutils sort command. This flaw allows an attacker to potentially read sensitive data from memory that should not be accessible, leading to information disclosure. The impact of this vulnerability can vary, but it poses a risk to the confidentiality of data processed by the sort command, especially in environments where sensitive information is handled. The CVSS score for this vulnerability is 4.4, indicating a moderate severity level.
How To Fix
Minimum fixed version
0:8.30-21.el8_10
This is the first release that contains the fix.
sudo dnf update coreutilsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid using the sort command with potentially unsafe inputs until the package is updated. Additionally, consider restricting access to sensitive data that may be processed by the sort command.
Conclusion
The coreutils package is vital for system operations, and the identified vulnerability (CVE-2025-5278) poses a moderate risk due to a Heap Buffer Under-Read in the sort command. Users are advised to update their coreutils package to the latest version to ensure system security and protect sensitive information.
See every vulnerability recorded for coreutils →
FAQ
CVE-2025-5278 is a vulnerability in the GNU Coreutils sort command that allows for a Heap Buffer Under-Read, potentially leading to information disclosure.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected by this vulnerability.
The consequences include potential exposure of sensitive data processed by the sort command, which can compromise system security and user privacy.
Yes, a patched version of the coreutils package is available. Users should update to version 0:8.30-21.el8_10 or later to mitigate the vulnerability.
If an immediate update is not possible, avoid using the sort command with sensitive data and restrict access to such data until the patch is applied.
Related vulnerabilities
Recent vulnerabilities recorded for coreutils.
