{
  "cveId": "CVE-2026-3184",
  "url": "https://patchblox.com/security/cve/CVE-2026-3184",
  "summary": "CVE-2026-3184 is fixed in 22 products on 1 platform, first by SUSE-SU-2026:0803-1, released March 4, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "Util-linux: util-linux: access control bypass due to improper hostname canonicalization",
  "description": "A flaw was found in util-linux. Improper hostname canonicalization in the \u0060login(1)\u0060 utility, when invoked with the \u0060-h\u0060 option, can modify the supplied remote hostname before setting \u0060PAM_RHOST\u0060. A remote attacker could exploit this by providing a specially crafted hostname, potentially bypassing host-based Pluggable Authentication Modules (PAM) access control rules that rely on fully qualified domain names. This could lead to unauthorized access.",
  "published": "2026-03-04T12:57:40Z",
  "severity": "Low",
  "cvss": 5.3,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
  "cwe": "Authentication Bypass by Alternate Name",
  "epss": 0.00444,
  "epssPercentile": 0.38843,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3184",
  "fixes": [
    {
      "platform": "linux",
      "product": "bsdextrautils",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "2.41.3-3ubuntu2.2",
      "fix": "bsdextrautils 2.41.3-3ubuntu2.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-bsdextrautils-2.41.3-3ubuntu2.2",
      "released": "2026-06-29T02:16:00Z"
    },
    {
      "platform": "linux",
      "product": "bsdutils",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "1:2.41.3-3ubuntu2.2",
      "fix": "bsdutils 1:2.41.3-3ubuntu2.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-bsdutils-1-2.41.3-3ubuntu2.2",
      "released": "2026-06-29T02:16:00Z"
    },
    {
      "platform": "linux",
      "product": "eject",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "2.41.3-3ubuntu2.2",
      "fix": "eject 2.41.3-3ubuntu2.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-eject-2.41.3-3ubuntu2.2",
      "released": "2026-06-29T02:16:00Z"
    },
    {
      "platform": "linux",
      "product": "fdisk",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "2.41.3-3ubuntu2.2",
      "fix": "fdisk 2.41.3-3ubuntu2.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-fdisk-2.41.3-3ubuntu2.2",
      "released": "2026-06-29T02:16:00Z"
    },
    {
      "platform": "linux",
      "product": "lastlog2",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "2.41.3-3ubuntu2.2",
      "fix": "lastlog2 2.41.3-3ubuntu2.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-lastlog2-2.41.3-3ubuntu2.2",
      "released": "2026-06-29T02:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libblkid1",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "2.41.3-3ubuntu2.2",
      "fix": "libblkid1 2.41.3-3ubuntu2.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-libblkid1-2.41.3-3ubuntu2.2",
      "released": "2026-06-29T02:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libfdisk1",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "2.41.3-3ubuntu2.2",
      "fix": "libfdisk1 2.41.3-3ubuntu2.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-libfdisk1-2.41.3-3ubuntu2.2",
      "released": "2026-06-29T02:16:00Z"
    },
    {
      "platform": "linux",
      "product": "liblastlog2-2",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "2.41.3-3ubuntu2.2",
      "fix": "liblastlog2-2 2.41.3-3ubuntu2.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-liblastlog2-2-2.41.3-3ubuntu2.2",
      "released": "2026-06-29T02:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libmount1",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "2.41.3-3ubuntu2.2",
      "fix": "libmount1 2.41.3-3ubuntu2.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-libmount1-2.41.3-3ubuntu2.2",
      "released": "2026-06-29T02:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libpam-lastlog2",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "2.41.3-3ubuntu2.2",
      "fix": "libpam-lastlog2 2.41.3-3ubuntu2.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-libpam-lastlog2-2.41.3-3ubuntu2.2",
      "released": "2026-06-29T02:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libsmartcols1",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "2.41.3-3ubuntu2.2",
      "fix": "libsmartcols1 2.41.3-3ubuntu2.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-libsmartcols1-2.41.3-3ubuntu2.2",
      "released": "2026-06-29T02:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libuuid1",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "2.41.3-3ubuntu2.2",
      "fix": "libuuid1 2.41.3-3ubuntu2.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-libuuid1-2.41.3-3ubuntu2.2",
      "released": "2026-06-29T02:16:00Z"
    },
    {
      "platform": "linux",
      "product": "login",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "1:4.16.0-2\u002Breally2.41.3-3ubuntu2.2",
      "fix": "login 1:4.16.0-2\u002Breally2.41.3-3ubuntu2.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-login-1-4.16.0-2-really2.41.3-3ubuntu2.2",
      "released": "2026-06-29T02:16:00Z"
    },
    {
      "platform": "linux",
      "product": "mount",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "2.41.3-3ubuntu2.2",
      "fix": "mount 2.41.3-3ubuntu2.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-mount-2.41.3-3ubuntu2.2",
      "released": "2026-06-29T02:16:00Z"
    },
    {
      "platform": "linux",
      "product": "python-libmount",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "2.39.3-150600.4.18.1",
      "fix": "SUSE-SU-2026:0803-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0803-1",
      "released": "2026-03-04T12:57:40Z"
    },
    {
      "platform": "linux",
      "product": "python-libmount",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "2.41.1-160000.3.1",
      "fix": "OPENSUSE-SU-2026:20495-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20495-1",
      "released": "2026-04-09T13:00:19Z"
    },
    {
      "platform": "linux",
      "product": "python-libmount",
      "release": "sles 16.0",
      "fixedVersion": "2.41.1-160000.3.1",
      "fix": "SUSE-SU-2026:21158-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-21158-1",
      "released": "2026-04-09T13:04:04Z"
    },
    {
      "platform": "linux",
      "product": "python3-libmount",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "2.37.4-150500.9.23.1",
      "fix": "SUSE-SU-2026:0856-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0856-1",
      "released": "2026-03-10T08:35:29Z"
    },
    {
      "platform": "linux",
      "product": "rfkill",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "2.41.3-3ubuntu2.2",
      "fix": "rfkill 2.41.3-3ubuntu2.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-rfkill-2.41.3-3ubuntu2.2",
      "released": "2026-06-29T02:16:00Z"
    },
    {
      "platform": "linux",
      "product": "util-linux",
      "release": "Debian 14",
      "fixedVersion": "2.42-1",
      "fix": "DEBIAN-CVE-2026-3184",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-3184",
      "released": "2026-04-03T19:17:23Z"
    },
    {
      "platform": "linux",
      "product": "util-linux",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "2.41.3-3ubuntu2.2",
      "fix": "util-linux 2.41.3-3ubuntu2.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-util-linux-2.41.3-3ubuntu2.2",
      "released": "2026-06-29T02:16:00Z"
    },
    {
      "platform": "linux",
      "product": "util-linux",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "2.37.4-150500.9.23.1",
      "fix": "SUSE-SU-2026:0856-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0856-1",
      "released": "2026-03-10T08:35:29Z"
    },
    {
      "platform": "linux",
      "product": "util-linux",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "2.41.1-160000.3.1",
      "fix": "OPENSUSE-SU-2026:20495-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20495-1",
      "released": "2026-04-09T13:00:19Z"
    },
    {
      "platform": "linux",
      "product": "util-linux",
      "release": "sles 15.7",
      "fixedVersion": "2.40.4-150700.4.10.1",
      "fix": "SUSE-SU-2026:1406-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1406-1",
      "released": "2026-04-16T12:35:29Z"
    },
    {
      "platform": "linux",
      "product": "util-linux",
      "release": "sles 16.0",
      "fixedVersion": "2.41.1-160000.3.1",
      "fix": "SUSE-SU-2026:21158-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-21158-1",
      "released": "2026-04-09T13:04:04Z"
    },
    {
      "platform": "linux",
      "product": "util-linux-extra",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "2.41.3-3ubuntu2.2",
      "fix": "util-linux-extra 2.41.3-3ubuntu2.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-util-linux-extra-2.41.3-3ubuntu2.2",
      "released": "2026-06-29T02:16:00Z"
    },
    {
      "platform": "linux",
      "product": "util-linux-locales",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "2.41.3-3ubuntu2.2",
      "fix": "util-linux-locales 2.41.3-3ubuntu2.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-util-linux-locales-2.41.3-3ubuntu2.2",
      "released": "2026-06-29T02:16:00Z"
    },
    {
      "platform": "linux",
      "product": "util-linux-systemd",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "2.39.3-150600.4.18.1",
      "fix": "SUSE-SU-2026:0803-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0803-1",
      "released": "2026-03-04T12:57:40Z"
    },
    {
      "platform": "linux",
      "product": "util-linux-systemd",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "2.41.1-160000.3.1",
      "fix": "OPENSUSE-SU-2026:20495-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20495-1",
      "released": "2026-04-09T13:00:19Z"
    },
    {
      "platform": "linux",
      "product": "util-linux-systemd",
      "release": "sles 15.7",
      "fixedVersion": "2.40.4-150700.4.10.1",
      "fix": "SUSE-SU-2026:1406-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1406-1",
      "released": "2026-04-16T12:35:29Z"
    },
    {
      "platform": "linux",
      "product": "util-linux-systemd",
      "release": "sles 16.0",
      "fixedVersion": "2.41.1-160000.3.1",
      "fix": "SUSE-SU-2026:21158-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-21158-1",
      "released": "2026-04-09T13:04:04Z"
    },
    {
      "platform": "linux",
      "product": "uuid-runtime",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "2.41.3-3ubuntu2.2",
      "fix": "uuid-runtime 2.41.3-3ubuntu2.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-uuid-runtime-2.41.3-3ubuntu2.2",
      "released": "2026-06-29T02:16:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}