Critical Security Update for coreutils: CVE-2025-5278 Vulnerability
Summary
RHSA-2026:69964: Red Hat Security Advisory: coreutils security update. Affects coreutils versions < 0:8.30-21.el8_10. Fixed in 0:8.30-21.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
coreutils is a fundamental package in the Red Hat Enterprise Linux ecosystem, providing essential utilities for file manipulation, text processing, and system management. It is widely used in various scripts and applications, making it a critical component for system administrators and developers. The package's reliability and functionality are paramount, but it has been found to have a security vulnerability that could potentially impact system integrity.
Vulnerability Detail
The vulnerability identified as CVE-2025-5278 affects coreutils, allowing unauthorized access to sensitive system information. This issue arises from improper handling of certain input parameters, which could lead to information disclosure or unauthorized command execution. If exploited, this vulnerability could compromise system security and lead to data breaches, making it crucial for users to address it promptly.
How To Fix
Minimum fixed version
0:8.30-21.el8_10
This is the first release that contains the fix.
sudo dnf update coreutilsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit access to the coreutils utilities by modifying user permissions or restricting access to sensitive scripts that utilize these commands. However, this is not a permanent solution and should be followed by an update as soon as possible.
Conclusion
The CVE-2025-5278 vulnerability in the coreutils package poses a significant risk to system security. Users are strongly advised to update to the patched version to mitigate potential threats. Regular monitoring and timely updates are essential for maintaining a secure environment.
See every vulnerability recorded for coreutils →
FAQ
CVE-2025-5278 is a security vulnerability in the coreutils package that could allow unauthorized access to sensitive system information.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Exploitation of this vulnerability could lead to information disclosure or unauthorized command execution, compromising system security.
You can update the coreutils package by running 'sudo dnf update coreutils' in your terminal.
The CVSS score for this vulnerability is 4.4, indicating a moderate level of severity.
Related vulnerabilities
Recent vulnerabilities recorded for coreutils.
