{
  "cveId": "CVE-2025-5278",
  "url": "https://patchblox.com/security/cve/CVE-2025-5278",
  "summary": "CVE-2025-5278 is fixed in 8 products on 1 platform, first by RHSA-2026:33124, released May 27, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "coreutils: A flaw was found in GNU Coreutils",
  "description": "A flaw was found in GNU Coreutils. The sort utility\u0027s begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.",
  "published": "2025-05-27T00:00:00Z",
  "severity": "Low",
  "cvss": 4.4,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
  "epss": 0.0031,
  "epssPercentile": 0.24016,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "coreutils",
      "release": "RHEL 10",
      "fixedVersion": "9.5-8.el10_2",
      "fix": "RHSA-2026:33124",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-33124",
      "released": "2025-05-27T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "coreutils",
      "release": "RHEL 8",
      "fixedVersion": "0:8.30-21.el8_10",
      "fix": "RHSA-2026:69964",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-69964",
      "released": "2026-09-23T19:19:34Z"
    },
    {
      "platform": "linux",
      "product": "coreutils",
      "release": "RHEL 9",
      "fixedVersion": "0:8.32-41.el9_8",
      "fix": "RHSA-2026:28911",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-28911",
      "released": "2026-06-29T14:21:35Z"
    },
    {
      "platform": "linux",
      "product": "coreutils",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "8.32-4.1ubuntu1.4",
      "fix": "coreutils 8.32-4.1ubuntu1.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-coreutils-8.32-4.1ubuntu1.4",
      "released": "2025-05-27T14:15:00Z"
    },
    {
      "platform": "linux",
      "product": "coreutils",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "9.4-3ubuntu6.3",
      "fix": "coreutils 9.4-3ubuntu6.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-coreutils-9.4-3ubuntu6.3",
      "released": "2025-05-27T14:15:00Z"
    },
    {
      "platform": "linux",
      "product": "coreutils",
      "release": "almalinux 10",
      "fixedVersion": "9.5-8.el10_2",
      "fix": "ALSA-2026:33124",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-33124",
      "released": "2026-06-29T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "coreutils",
      "release": "almalinux 8",
      "fixedVersion": "8.30-21.el8_10",
      "fix": "ALSA-2026:69964",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-69964",
      "released": "2026-09-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "coreutils",
      "release": "almalinux 9",
      "fixedVersion": "8.32-41.el9_8",
      "fix": "ALSA-2026:28911",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-28911",
      "released": "2026-06-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "coreutils",
      "release": "amzn 2023",
      "fixedVersion": "8.32-30.amzn2023.0.4",
      "fix": "ALAS2023-2025-1194",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1194",
      "released": "2025-09-15T23:14:00Z"
    },
    {
      "platform": "linux",
      "product": "coreutils",
      "release": "ol 10",
      "fixedVersion": "0:9.5-8.0.1.el10_2",
      "fix": "ELSA-2026-33124",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-33124",
      "released": "2026-07-16T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "coreutils",
      "release": "ol 8",
      "fixedVersion": "0:8.30-21.0.1.el8_10",
      "fix": "ELSA-2026-69964",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-69964",
      "released": "2026-09-23T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "coreutils",
      "release": "ol 9",
      "fixedVersion": "0:8.32-41.0.1.el9_8",
      "fix": "ELSA-2026-28911",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-28911",
      "released": "2026-06-25T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "coreutils",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "8.32-150400.9.9.1",
      "fix": "SUSE-SU-2025:02362-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02362-1",
      "released": "2025-07-18T09:07:36Z"
    },
    {
      "platform": "linux",
      "product": "coreutils",
      "release": "rocky 10",
      "fixedVersion": "0:9.5-8.el10_2",
      "fix": "RLSA-2026:33124",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-33124",
      "released": "2026-07-05T12:05:17Z"
    },
    {
      "platform": "linux",
      "product": "coreutils",
      "release": "rocky 8",
      "fixedVersion": "0:8.30-21.el8_10",
      "fix": "RLSA-2026:69964",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-69964",
      "released": "2026-09-23T06:00:55Z"
    },
    {
      "platform": "linux",
      "product": "coreutils",
      "release": "rocky 9",
      "fixedVersion": "0:8.32-41.el9_8",
      "fix": "RLSA-2026:28911",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-28911",
      "released": "2026-06-25T12:03:43Z"
    },
    {
      "platform": "linux",
      "product": "coreutils",
      "release": "sles 15.6",
      "fixedVersion": "8.32-150400.9.9.1",
      "fix": "SUSE-SU-2025:02362-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02362-1",
      "released": "2025-07-18T09:07:36Z"
    },
    {
      "platform": "linux",
      "product": "coreutils",
      "release": "sles 15.7",
      "fixedVersion": "8.32-150400.9.9.1",
      "fix": "SUSE-SU-2025:02362-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02362-1",
      "released": "2025-07-18T09:07:36Z"
    },
    {
      "platform": "linux",
      "product": "coreutils-common",
      "release": "almalinux 10",
      "fixedVersion": "9.5-8.el10_2",
      "fix": "ALSA-2026:33124",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-33124",
      "released": "2026-06-29T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "coreutils-common",
      "release": "almalinux 8",
      "fixedVersion": "8.30-21.el8_10",
      "fix": "ALSA-2026:69964",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-69964",
      "released": "2026-09-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "coreutils-common",
      "release": "almalinux 9",
      "fixedVersion": "8.32-41.el9_8",
      "fix": "ALSA-2026:28911",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-28911",
      "released": "2026-06-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "coreutils-common",
      "release": "amzn 2023",
      "fixedVersion": "8.32-30.amzn2023.0.4",
      "fix": "ALAS2023-2025-1194",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1194",
      "released": "2025-09-15T23:14:00Z"
    },
    {
      "platform": "linux",
      "product": "coreutils-common",
      "release": "ol 10",
      "fixedVersion": "0:9.5-8.0.1.el10_2",
      "fix": "ELSA-2026-33124",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-33124",
      "released": "2026-07-16T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "coreutils-common",
      "release": "ol 8",
      "fixedVersion": "0:8.30-21.0.1.el8_10",
      "fix": "ELSA-2026-69964",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-69964",
      "released": "2026-09-23T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "coreutils-common",
      "release": "ol 9",
      "fixedVersion": "0:8.32-41.0.1.el9_8",
      "fix": "ELSA-2026-28911",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-28911",
      "released": "2026-06-25T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "coreutils-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "8.32-30.amzn2023.0.4",
      "fix": "ALAS2023-2025-1194",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1194",
      "released": "2025-09-15T23:14:00Z"
    },
    {
      "platform": "linux",
      "product": "coreutils-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "8.32-30.amzn2023.0.4",
      "fix": "ALAS2023-2025-1194",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1194",
      "released": "2025-09-15T23:14:00Z"
    },
    {
      "platform": "linux",
      "product": "coreutils-single",
      "release": "RHEL 8",
      "fixedVersion": "0:8.30-21.el8_10",
      "fix": "RHSA-2026:69964",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-69964",
      "released": "2026-09-23T19:19:34Z"
    },
    {
      "platform": "linux",
      "product": "coreutils-single",
      "release": "RHEL 9",
      "fixedVersion": "0:8.32-41.el9_8",
      "fix": "RHSA-2026:28911",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-28911",
      "released": "2026-06-29T14:21:35Z"
    },
    {
      "platform": "linux",
      "product": "coreutils-single",
      "release": "almalinux 10",
      "fixedVersion": "9.5-8.el10_2",
      "fix": "ALSA-2026:33124",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-33124",
      "released": "2026-06-29T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "coreutils-single",
      "release": "almalinux 8",
      "fixedVersion": "8.30-21.el8_10",
      "fix": "ALSA-2026:69964",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-69964",
      "released": "2026-09-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "coreutils-single",
      "release": "almalinux 9",
      "fixedVersion": "8.32-41.el9_8",
      "fix": "ALSA-2026:28911",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-28911",
      "released": "2026-06-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "coreutils-single",
      "release": "amzn 2023",
      "fixedVersion": "8.32-30.amzn2023.0.4",
      "fix": "ALAS2023-2025-1194",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1194",
      "released": "2025-09-15T23:14:00Z"
    },
    {
      "platform": "linux",
      "product": "coreutils-single",
      "release": "ol 10",
      "fixedVersion": "0:9.5-8.0.1.el10_2",
      "fix": "ELSA-2026-33124",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-33124",
      "released": "2026-07-16T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "coreutils-single",
      "release": "ol 8",
      "fixedVersion": "0:8.30-21.0.1.el8_10",
      "fix": "ELSA-2026-69964",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-69964",
      "released": "2026-09-23T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "coreutils-single",
      "release": "ol 9",
      "fixedVersion": "0:8.32-41.0.1.el9_8",
      "fix": "ELSA-2026-28911",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-28911",
      "released": "2026-06-25T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "coreutils-single",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "8.32-150400.9.9.1",
      "fix": "SUSE-SU-2025:02362-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02362-1",
      "released": "2025-07-18T09:07:36Z"
    },
    {
      "platform": "linux",
      "product": "coreutils-single-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "8.32-30.amzn2023.0.4",
      "fix": "ALAS2023-2025-1194",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1194",
      "released": "2025-09-15T23:14:00Z"
    },
    {
      "platform": "linux",
      "product": "coreutils-testsuite",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "8.32-150400.9.9.1",
      "fix": "SUSE-SU-2025:02362-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02362-1",
      "released": "2025-07-18T09:07:36Z"
    },
    {
      "platform": "linux",
      "product": "gnu-coreutils",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "9.7-3ubuntu2.1",
      "fix": "gnu-coreutils 9.7-3ubuntu2.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-gnu-coreutils-9.7-3ubuntu2.1",
      "released": "2026-07-24T02:16:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}