diff --git a/package/util-linux/0007-lib-path-avoid-double-free-for-cpusets.patch b/package/util-linux/0007-lib-path-avoid-double-free-for-cpusets.patch
new file mode 100644
index 0000000000..f3d9e75652
--- /dev/null
+++ b/package/util-linux/0007-lib-path-avoid-double-free-for-cpusets.patch
@@ -0,0 +1,30 @@
+From 27279d4ab2431e1afb3a125ae7306eb2323b86b7 Mon Sep 17 00:00:00 2001
+From: Karel Zak <kzak@redhat.com>
+Date: Wed, 2 Jul 2025 12:25:45 +0200
+Subject: [PATCH] lib/path: avoid double free() for cpusets
+
+Addresses: https://github.com/util-linux/util-linux/issues/3641
+Signed-off-by: Karel Zak <kzak@redhat.com>
+
+Upstream: https://github.com/util-linux/util-linux/commit/27279d4ab2431e1afb3a125ae7306eb2323b86b7
+Signed-off-by: Thomas Perale <thomas.perale@mind.be>
+---
+ lib/path.c | 4 +++-
+ 1 file changed, 3 insertions(+), 1 deletion(-)
+
+diff --git a/lib/path.c b/lib/path.c
+index f897599fd06..29b074a959b 100644
+--- a/lib/path.c
++++ b/lib/path.c
+@@ -1053,8 +1053,10 @@ static int ul_path_cpuparse(struct path_cxt *pc, cpu_set_t **set, int maxcpus, i
+ 	rc = 0;
+ 
+ out:
+-	if (rc)
++	if (rc) {
+ 		cpuset_free(*set);
++		*set = NULL;
++	}
+ 	free(buf);
+ 	return rc;
+ }
diff --git a/package/util-linux/util-linux.hash b/package/util-linux/util-linux.hash
index 317efebcbf..09f8874bf2 100644
--- a/package/util-linux/util-linux.hash
+++ b/package/util-linux/util-linux.hash
@@ -1,5 +1,5 @@
 # From https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/sha256sums.asc
-sha256  d78b37a66f5922d70edf3bdfb01a6b33d34ed3c3cafd6628203b2a2b67c8e8b3  util-linux-2.40.2.tar.xz
+sha256  5c1daf733b04e9859afdc3bd87cc481180ee0f88b5c0946b16fdec931975fb79  util-linux-2.40.4.tar.xz
 # License files, locally calculated
 sha256  27f25514040a401b2ceb7057eae1f46cedb1666664b519b5be7e0960d1b35164  README.licensing
 sha256  9b718a9460fed5952466421235bc79eb49d4e9eacc920d7a9dd6285ab8fd6c6d  Documentation/licenses/COPYING.BSD-3-Clause
diff --git a/package/util-linux/util-linux.mk b/package/util-linux/util-linux.mk
index d30c26deb5..64da9ab5d5 100644
--- a/package/util-linux/util-linux.mk
+++ b/package/util-linux/util-linux.mk
@@ -8,7 +8,7 @@
 # util-linux-libs/util-linux-libs.mk needs to be updated accordingly as well.
 
 UTIL_LINUX_VERSION_MAJOR = 2.40
-UTIL_LINUX_VERSION = $(UTIL_LINUX_VERSION_MAJOR).2
+UTIL_LINUX_VERSION = $(UTIL_LINUX_VERSION_MAJOR).4
 UTIL_LINUX_SOURCE = util-linux-$(UTIL_LINUX_VERSION).tar.xz
 UTIL_LINUX_SITE = $(BR2_KERNEL_MIRROR)/linux/utils/util-linux/v$(UTIL_LINUX_VERSION_MAJOR)