CVE-2026-3184General(kernel / hardened_images)

LOWCVSS 5.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch kernel hardened_images systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied remote hostname before setting `PAM_RHOST`. A remote attacker could exploit this by providing a specially crafted hostname, potentially bypassing host-based Pluggable Authentication Modules (PAM) access control rules that rely on fully qualified domain names. This could lead to unauthorized access.

kernel CVEs Back to dashboard

1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

Weakness type (CWE)

CWE-289

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

hardened_images
util-linux

Threat summary

Patch or workaround signal is available
5 mentions across 5 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 1 signal
General: 3 classified signals
Peaked 4d ago at 1 mentions (2026-03-10); latest day: 1
5 total mentions across 5 days

Affected systems

Vendors

kernel redhat

Products

hardened_imagesutil-linux

1 version affected across 2 products

Deep dive

Activity timeline5 mentions / 5d

Signal classification2 categories

General

360.0%

Patch

240.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-10	1	Patch1
2026-04-08	1	General1
2026-04-09	1	General1
2026-04-10	1	General1
2026-07-20	1	Patch1

Full discourse5 posts

VulniPulse@vulnipulse80d
Patch
⚠️ NetApp Active IQ Unified Manager for VMware vSphere alert: CVE-2026-3184 (CVSS 3.7) Attackers could affect the listed product. No workaround is available; follow the vendor advisory for updates. https://vulnipulse.com/advisories/netapp-ntap-20260612-0011 #NetApp #CyberSecurity #CVE
Post summary
Alert announces CVE‑2026‑3184 affecting NetApp Active IQ; there is no workaround, and users are advised to follow the vendor advisory for patches.
0000044
6 followersView on X
Stuart 🇨🇷@stooee_180d
General
After analyzing 62% of vulnerabilities from past week, CVE-2026-3184 has 6 articles published from different internet sources, no other cve has these many articles. More information here: https://cves.st00ee.com/ #vulnerability #CyberSecurity #ThreatIntel #CVE #SecurityAlert
Post summary
The post merely notes that CVE‑2026‑3184 has several articles but provides no technical details, PoC, or exploit information.
00000113
70 followersView on X
Stuart 🇨🇷@stooee_181d
General
After analyzing 49% of vulnerabilities from past week, CVE-2026-3184 has 6 articles published from different internet sources, no other cve has these many articles. More information here: https://cves.st00ee.com/ #vulnerability #CyberSecurity #ThreatIntel #CVE #SecurityAlert
Post summary
The post indicates that CVE‑2026‑3184 has received unusually high media attention, with six articles referenced, but it offers no technical details, exploit code, or patch information.
0000050
70 followersView on X
Stuart 🇨🇷@stooee_182d
General
After analyzing 36% of vulnerabilities from past week, CVE-2026-3184 has 6 articles published from different internet sources, no other cve has these many articles. More information here: https://cves.st00ee.com/ #vulnerability #CyberSecurity #ThreatIntel #CVE #SecurityAlert
Post summary
Highlights the high number of articles on CVE-2026-3184 but offers no technical details, PoC, patch, or exploitation evidence, making it a general informational post.
0000053
70 followersView on X
Ferramentas Linux@Cezar_H_Linux211d
Patch
SUSE Linux Patches util-linux Access Control Flaw (CVE-2026-3184) Just posted: A detailed look at the new #SUSE security advisory (SUSE-SU-2026:0856-1). Read more: 👉 https://tinyurl.com/y6e9y86b https://t.co/DNZrT1cWEX
Post summary
SUSE has issued a patch for the util-linux access control flaw (CVE‑2026‑3184), as detailed in their security advisory.
0000047
1.3K followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	kernel	util-linux	-	-	-
App	redhat	hardened_images	-	-	-

Explore more

Back to dashboard kernel CVEs redhat CVEs hardened_images vulnerabilities

What researchers are saying

CVE-2026-3184

VulniPulse[verified]@vulnipulsePatch

Alert announces CVE‑2026‑3184 affecting NetApp Active IQ; there is no workaround, and users are advised to follow the vendor advisory for patches.

Stuart 🇨🇷@stooee_General

The post merely notes that CVE‑2026‑3184 has several articles but provides no technical details, PoC, or exploit information.

Stuart 🇨🇷@stooee_General

The post indicates that CVE‑2026‑3184 has received unusually high media attention, with six articles referenced, but it offers no technical details, exploit code, or patch information.

Stuart 🇨🇷@stooee_General

Highlights the high number of articles on CVE-2026-3184 but offers no technical details, PoC, patch, or exploitation evidence, making it a general informational post.

Ferramentas Linux@Cezar_H_LinuxPatch

SUSE has issued a patch for the util-linux access control flaw (CVE‑2026‑3184), as detailed in their security advisory.