1268 matches found
CVE-2026-78410
A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount8 to bind another host directory. If the fst...
CVE-2026-78408 Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority
The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve. Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an...
CVE-2026-78408
util-linux nsenter --join-cgroup opens the target cgroup.procs file as root and leaves the file descriptor open across subsequent namespace, credential, and execve() transitions. Because the kernel evaluates later cgroup migrations against the credentials of the original open, a process in an att...
CVE-2026-78410
A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount8 to bind another host directory. If the fst...
CVE-2026-78409
The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to opentree with ATSYMLINKNOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with...
CVE-2026-78408
The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve. Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an...
CVE-2026-76642
When an external mount. helper runs but exits with a nonzero status, libmount still treats the helper invocation as successful and runs privileged post-mount hooks. A local unprivileged user with an /etc/fstab entry that uses the user option together with X-mount.idmap or X-mount.owner/group/mode...
Linux Distros Unpatched Vulnerability : CVE-2026-78410
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local...
The vulnerability of the Util-linux command-line utility suite relates to insufficient checking of the status of shared resources, which allows a perpetrator to trigger a service failure.
The vulnerability of the Util-linux command-line utility package relates to insufficient checking of the status of shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...
Astra Linux – Vulnerability in util-linux
The wall function in util-linux up to version 2.40 is often installed with setgid and tty permissions. This allows escape sequences to be sent to other users’ terminals via argv. Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocke...
CVE-2026-53614
A flaw was found in util-linux. The mount8 SUID binary does not sanitize the LIBMOUNTFORCEMOUNT2 environment variable before use. A local unprivileged user can set this variable to force mount8 to use the legacy two-step mount2 code path, which applies security restrictions such as nosuid and...
CVE-2026-53613
When an /etc/fstab entry is configured with the user or users option, mount8 validates the target path before performing the mount syscall, creating a Time-of-Check-Time-of-Use TOCTOU window. A local unprivileged user with write access to an ancestor directory of the mount target can swap that...
CVE-2026-53612
A flaw was found in util-linux. When an /etc/fstab entry uses the user option together with X-mount.owner, X-mount.group, or X-mount.mode, mount8 changes ownership or permissions on the mount target after mounting without re-verifying the path. A local unprivileged user can exploit this...
ROOT-OS-UBUNTU-2404-CVE-2026-27456 CVE-2026-27456 in util-linux - Patched by Root
Root has patched CVE-2026-27456 in the util-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ANT-2026-ZRDQDR79 · util-linux · heap-use-after-free
use-after-free medium CVE-2026-13595 GHSA-qpmf-9p9c-455w Severity Claude critical · Security research firm high · Maintainer medium Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-ZRDQDR79:...
[SECURITY] [DSA 6442-1] util-linux security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6442-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 14, 2026 https://www.debian.org/security/faq -...
The vulnerability of the Util-linux command-line utility package relates to the incorrect definition of symbolic links before accessing the file. This allows an attacker to gain access to confidential data.
The vulnerability of the Util-linux command-line utility package relates to the incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
ROOT-OS-DEBIAN-13-CVE-2026-13595 CVE-2026-13595 in util-linux - Patched by Root
Root has patched CVE-2026-13595 in the util-linux package for Root:Debian:13. Multiple fixed versions available...