CVE-2026-53613-poc

CVE-2026-53613 PoC TOCTOU vulnerability in mount8 allowing local privilege escalation to root. Vulnerable Versions util-linux 2.41.0 through 2.41.4 util-linux 2.42.0 through 2.42.1 Exploits File| Method| Target ---|---|--- exploitshell.sh| SSH key extraction| /root exploitdirectshell.sh| Direct...

OESA-2026-4073 util-linux security update

The util-linux package contains a random collection of files that implements some low-level basic linux utilities. Security Fixes: CVE-2026-53612 has no publicly disclosed vulnerability details yet. It is only indexed by the Snyk data source. Details are pending disclosure.CVE-2026-53612 When an...

SUSE SLES12: libblkid-devel / libblkid1 / libblkid1-32bit / libfdisk1 / etc (SUSE-SU-2026:4296-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4296-1 advisory. - CVE-2026-13595: heap use-after-free in libblkid nested partition probing bsc1269583. - CVE-2026-27456: TOCTOU in the mount progra...

SUSE-SU-2026:23861-1 Security update for util-linux

This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free in libblkid nested partition probing bsc1269583. - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices bsc1261606. - CVE-2026-53612: local privilege escalation via TOCTOU in mount8...

SUSE-SU-2026:23884-1 Security update for util-linux

This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free in libblkid nested partition probing bsc1269583. - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices bsc1261606. - CVE-2026-53612: local privilege escalation via TOCTOU in mount8...

DEBIAN-CVE-2026-78410

A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount8 to bind another host directory. If the fst...

ALPINE-CVE-2026-78410

A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount8 to bind another host directory. If the fst...

CVE-2026-78410

A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount8 to bind another host directory. If the fst...

CVE-2026-78410

A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount8 to bind another host directory. If the fst...

Exploit for CVE-2026-53613

CVE-2026-53613 PoC TOCTOU vulnerability in mount8 allowing...

CVE-2026-53612

A flaw was found in util-linux. When an /etc/fstab entry uses the user option together with X-mount.owner, X-mount.group, or X-mount.mode, mount8 changes ownership or permissions on the mount target after mounting without re-verifying the path. A local unprivileged user can exploit this...