CVE-2022-0563
A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support....
A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.
- Record
CVE-2022-0563- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 1.9 Low
AV:L/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-209
- Updated
- 2026-11-02
CVE List
A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.
- Record
CVE-2022-0563- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-209
- Updated
- 2026-11-02
EUVDEUVD-2022-15682
A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.
- Record
EUVD-2022-15682- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-5896-67mw-rv4j
A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support....
A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.
- Record
GHSA-5896-67mw-rv4j- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-209
- Updated
- 2026-11-02
OSVALPINE-CVE-2022-0563
A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.
- Record
ALPINE-CVE-2022-0563- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-03
OSVAZL-8841
CVE-2022-0563 affecting package util-linux for versions less than 2.37.4-1
A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.
- Record
AZL-8841- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
Show 7 moreShow less
OSVBELL-CVE-2022-0563
CVE-2022-0563 does not affect BellSoft software
- Record
BELL-CVE-2022-0563- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSV
A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.
- Record
CVE-2022-0563- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-209
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2022-0563
A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.
- Record
DEBIAN-CVE-2022-0563- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-03
OSVJLSEC-2025-191
A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support
A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.
- Record
JLSEC-2025-191- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 1.9 Low
AV:L/AC:M/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
OSVMGASA-2022-0076 No score
Updated util-linux packages fix security vulnerability
An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic environments. (CVE-2021-37600)
Unauthorized unmount of FUSE filesystems belonging to users with similar uid. (CVE-2021-3995)
Unauthorized unmount of filesystems in libmount (CVE-2021-3996)
A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4. (CVE-2022-0563)
Additional bug fixes included by updating to version 2.36.2. See release notes for details.
- Record
MGASA-2022-0076- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11915-1 No score
libblkid-devel-2.37.4-1.1 on GA media
These are all security issues fixed in the libblkid-devel-2.37.4-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11915-1- Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2022-0563 No score
CVE-2022-0563 in util-linux - Patched by Root
Root has patched CVE-2022-0563 in the util-linux package for Root:Debian:12. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-12-CVE-2022-0563- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
util-linuxAlpine:v3.12 |
before 2.37.4-r0 | 2.37.4-r0 |
util-linuxAlpine:v3.13 |
before 2.37.4-r0 | 2.37.4-r0 |
util-linuxAlpine:v3.14 |
before 2.37.4-r0 | 2.37.4-r0 |
util-linuxAlpine:v3.15 |
before 2.37.4-r0 | 2.37.4-r0 |
util-linuxAlpine:v3.16 |
before 2.37.4-r0 | 2.37.4-r0 |
util-linuxAlpine:v3.17 |
before 2.37.4-r0 | 2.37.4-r0 |
util-linuxAlpine:v3.18 |
before 2.37.4-r0 | 2.37.4-r0 |
util-linuxAlpine:v3.19 |
before 2.37.4-r0 | 2.37.4-r0 |
util-linuxAlpine:v3.20 |
before 2.37.4-r0 | 2.37.4-r0 |
util-linuxAlpine:v3.21 |
before 2.37.4-r0 | 2.37.4-r0 |
Show 14 moreShow less
| Package | Affected | Fixed |
|---|---|---|
util-linuxAlpine:v3.22 |
before 2.37.4-r0 | 2.37.4-r0 |
util-linuxAlpine:v3.23 |
before 2.37.4-r0 | 2.37.4-r0 |
util-linuxAlpine:v3.24 |
before 2.37.4-r0 | 2.37.4-r0 |
util-linuxAzure Linux:2 |
before 2.37.4-1 | 2.37.4-1 |
util-linuxDebian:12 |
All versions, plus listed versions 2.38.1-52.38.1-5+deb12u12.38.1-5+deb12u22.38.1-5+deb12u32.38.1-5+loong64 Show 45 moreShow less2.38.1-62.39.1-12.39.1-22.39.1-32.39.1-42.39.2-12.39.2-22.39.2-2.12.39.2-2.22.39.2-32.39.2-42.39.2-52.39.2-62.39.3-12.39.3-102.39.3-112.39.3-22.39.3-32.39.3-42.39.3-52.39.3-62.39.3-6.12.39.3-6.1~exp12.39.3-72.39.3-82.39.3-92.40-12.40-22.40-32.40-42.40-52.40-62.40-72.40-82.40.1-12.40.1-22.40.1-32.40.1-42.40.1-4+hurd.12.40.1-62.40.1-72.40.1-82.40.1-8.12.40.1-92.40.2-1 |
None known |
util-linuxDebian:13 |
All versions, plus listed versions 2.41-52.41.1-12.41.1-22.41.1-32.41.1-4 Show 31 moreShow less2.41.2-12.41.2-22.41.2-32.41.2-42.41.3-12.41.3-22.41.3-32.41.3-42.41.5-0+deb13u12.42-12.42-22.42-32.42-42.42-52.42-62.42.1-12.42.1-22.42.1-32.42.1-42.42.1-52.42.1-62.42.2-12.42.2-22.42.2-32.42.2-42.42.3-12.42.4-12.42~rc1-12.42~rc1-22.42~rc1-32.42~rc2-1 |
None known |
util-linuxDebian:14 |
All versions, plus listed versions 2.41-52.41.1-12.41.1-22.41.1-32.41.1-4 Show 30 moreShow less2.41.2-12.41.2-22.41.2-32.41.2-42.41.3-12.41.3-22.41.3-32.41.3-42.42-12.42-22.42-32.42-42.42-52.42-62.42.1-12.42.1-22.42.1-32.42.1-42.42.1-52.42.1-62.42.2-12.42.2-22.42.2-32.42.2-42.42.3-12.42.4-12.42~rc1-12.42~rc1-22.42~rc1-32.42~rc2-1 |
None known |
Libmount_jllJulia |
before 2.39.3+0 | 2.39.3+0 |
Libuuid_jllJulia |
before 2.39.3+0 | 2.39.3+0 |
util_linux_jllJulia |
before 2.39.3+0 | 2.39.3+0 |
util-linuxMageia:8 From an advisory covering 4 CVEs |
before 2.36.2-1.mga8 | 2.36.2-1.mga8 |
util-linuxRoot:Debian:12 |
before 2.38.1-5+deb12u3.aikido.6 | 2.38.1-5+deb12u3.aikido.62.38.1-5+deb12u3.aikido.172.38.1-5+deb12u3.root.io.22.38.1-5+deb12u3.aikido.72.38.1-5+deb12u3.root.io.52.38.1-5+deb12u3.root.io.42.38.1-5+deb12u3.root.io.32.38.1-5+deb12u3.aikido.82.38.1-5+deb12u3.aikido.182.38.1-5+deb12u3.aikido.92.38.1-5+deb12u3.aikido.102.38.1-5+deb12u3.aikido.112.38.1-5+deb12u3.aikido.122.38.1-5+deb12u3.aikido.132.38.1-5+deb12u3.aikido.142.38.1-5+deb12u3.aikido.152.38.1-5+deb12u3.aikido.16 |
rootio-util-linuxRoot:Debian:12 |
before 2.38.1-5+deb12u3.aikido.6 | 2.38.1-5+deb12u3.aikido.62.38.1-5+deb12u3.aikido.172.38.1-5+deb12u3.root.io.22.38.1-5+deb12u3.aikido.72.38.1-5+deb12u3.root.io.52.38.1-5+deb12u3.root.io.42.38.1-5+deb12u3.root.io.32.38.1-5+deb12u3.aikido.82.38.1-5+deb12u3.aikido.182.38.1-5+deb12u3.aikido.92.38.1-5+deb12u3.aikido.102.38.1-5+deb12u3.aikido.112.38.1-5+deb12u3.aikido.122.38.1-5+deb12u3.aikido.132.38.1-5+deb12u3.aikido.142.38.1-5+deb12u3.aikido.152.38.1-5+deb12u3.aikido.16 |
util-linuxopenSUSE:Tumbleweed |
before 2.37.4-1.1 | 2.37.4-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-0563 is a medium vulnerability (CVSS 5.5) in Kernel Util-linux, published February 21, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 37th percentile. Fixed in util-linux 2.37.4-r0.
References
lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w%40ws.net.home/T
security.netapp.com/advisory/ntap-20220331-0002
security.gentoo.org/glsa/202401-08
cert-portal.siemens.com/productcert/html/ssa-398330.html
nvd.nist.gov/vuln/detail/CVE-2022-0563
Show 16 moreShow less
github.com/advisories/GHSA-5896-67mw-rv4j
security.alpinelinux.org/vuln/CVE-2022-0563
docs.bell-sw.com/security/cves/CVE-2022-0563
security-tracker.debian.org/tracker/CVE-2022-0563
advisories.mageia.org/MGASA-2022-0076.html
bugs.mageia.org/show_bug.cgi?id=29565
lists.suse.com/pipermail/sle-security-updates/2021-October/009610.html
openwall.com/lists/oss-security/2022/01/24/2
debian.org/security/2022/dsa-5055
lists.fedoraproject.org/archives/list/[email protected]/thread/SW73IARDAP7WWQ6ETYQB2OS2SLW4XTT3
ubuntu.com/security/notices/USN-5279-1
cdn.kernel.org/pub/linux/utils/util-linux/v2.36/v2.36.2-ReleaseNotes
suse.com/security/cve/CVE-2022-0563
Left out here: 70 versions. The JSON record has them.