Acknowledged
Created: May 28, 2025
Updated: Jun 25, 2025
Found In Version: 10.21.20.1
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Userspace
A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.
CREATE(Triage):(User=admin) CVE-2025-5278 (https://nvd.nist.gov/vuln/detail/CVE-2025-5278)
