Lucene search
+L

22 matches found

NVD
NVD
•added 2026/10/14 3:17 p.m.•2 views

CVE-2026-53612

util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID mount utility's hookowner.c post-mount hook performs path-based chmod and lchown operations on a previously validated mount target. A local low-privileged user authorized by a...

7CVSS
SaveExploits0References7
AlpineLinux
AlpineLinux
•added 2026/10/14 2:52 p.m.•17 views

CVE-2026-53613

util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy mount2 path is used without /proc, restricted non-root mount requests validate an /etc/fstab target before the mount operation re-resolves that pathname. ...

7CVSS6.7AI score
SaveExploits1
CVE
CVE
•added 2026/10/14 2:52 p.m.•212 views

CVE-2026-53613

A Time-of-Check Time-of-Use (TOCTOU) vulnerability in util-linux allows a local low-privileged user to achieve local privilege escalation to root. The issue exists because the mount(8) utility validates a target path from an /etc/fstab entry (authorized via user or users options) before the mount...

7CVSS6.7AI score
SaveExploits1References14
AlpineLinux
AlpineLinux
•added 2026/10/14 2:47 p.m.•22 views

CVE-2026-53612

util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID mount utility's hookowner.c post-mount hook performs path-based chmod and lchown operations on a previously validated mount target. A local low-privileged user authorized by a...

7CVSS5.8AI score
SaveExploits0
Cvelist
Cvelist
•added 2026/10/14 2:47 p.m.•7 views

CVE-2026-53612 util-linux mount hook_owner TOCTOU allows local privilege escalation

util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID mount utility's hookowner.c post-mount hook performs path-based chmod and lchown operations on a previously validated mount target. A local low-privileged user authorized by a...

7CVSS
SaveExploits0References7
EUVD
EUVD
•added 2026/10/14 2:47 p.m.•1 views

EUVD-2026-101123

util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID mount utility's hookowner.c post-mount hook performs path-based chmod and lchown operations on a previously validated mount target. A local low-privileged user authorized by a...

7CVSS5.8AI score
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2026/09/12 4:26 p.m.•13 views

SUSE CVE-2026-89560

In the Linux kernel, the following vulnerability has been resolved: landlock: Require LANDLOCKACCESSFSMAKEREG for whiteout creation Whiteout objects are used in the upper layer of an OverlayFS to indicate that the file with this name does not exist in the unified view, even if it is present in on...

8.4CVSS5.9AI score0.00126EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/12 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-89560

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - landlock: Require LANDLOCKACCESSFSMAKEREG for whiteout creation Whiteout objects are used in the upper layer of an OverlayFS to indicate that the file with this...

8.4CVSS5.7AI score0.00126EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/11 8:19 p.m.•18 views

AZL-100692 CVE-2026-89560 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: landlock: Require LANDLOCKACCESSFSMAKEREG for whiteout creation Whiteout objects are used in the upper layer of an OverlayFS to indicate that the file with this name does not exist in the unified view, even if it is present in on...

8.4CVSS5.9AI score0.00126EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/09/11 8:19 p.m.•22 views

CVE-2026-89560

In the Linux kernel, the following vulnerability has been resolved: landlock: Require LANDLOCKACCESSFSMAKEREG for whiteout creation Whiteout objects are used in the upper layer of an OverlayFS to indicate that the file with this name does not exist in the unified view, even if it is present in on...

8.4CVSS5.9AI score0.00126EPSS
SaveExploits0References5
OSV
OSV
•added 2026/09/11 8:19 p.m.•14 views

UBUNTU-CVE-2026-89560

In the Linux kernel, the following vulnerability has been resolved: landlock: Require LANDLOCKACCESSFSMAKEREG for whiteout creation Whiteout objects are used in the upper layer of an OverlayFS to indicate that the file with this name does not exist in the unified view, even if it is present in on...

8.4CVSS6.1AI score0.00126EPSS
SaveExploits0References6
OSV
OSV
•added 2026/09/11 7:44 p.m.•24 views

CVE-2026-89560 landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation

In the Linux kernel, the following vulnerability has been resolved: landlock: Require LANDLOCKACCESSFSMAKEREG for whiteout creation Whiteout objects are used in the upper layer of an OverlayFS to indicate that the file with this name does not exist in the unified view, even if it is present in on...

8.4CVSS5.9AI score
SaveExploits0References10
CVE
CVE
•added 2026/09/11 7:44 p.m.•36 views

CVE-2026-89560

CVE-2026-89560 affects the Linux kernel Landlock security module , specifically the permission checks for whiteout object creation in the upper layer of OverlayFS (fuse-overlayfs). Two flaws exist: first, mknod(2) with S_IFCHR/makedev(0,0) was guarded by LANDLOCK_ACCESS_FS_MAKE_CHAR instead of th...

8.4CVSS5.9AI score0.00126EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/09/11 7:44 p.m.•16 views

EUVD-2026-76471

In the Linux kernel, the following vulnerability has been resolved: landlock: Require LANDLOCKACCESSFSMAKEREG for whiteout creation Whiteout objects are used in the upper layer of an OverlayFS to indicate that the file with this name does not exist in the unified view, even if it is present in on...

5.9AI score0.00126EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/09/11 7:44 p.m.•42 views

CVE-2026-89560 landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation

In the Linux kernel, the following vulnerability has been resolved: landlock: Require LANDLOCKACCESSFSMAKEREG for whiteout creation Whiteout objects are used in the upper layer of an OverlayFS to indicate that the file with this name does not exist in the unified view, even if it is present in on...

8.4CVSS0.00126EPSS
SaveExploits0References7
Debian CVE
Debian CVE
•added 2026/09/11 7:44 p.m.•26 views

CVE-2026-89560

In the Linux kernel, the following vulnerability has been resolved: landlock: Require LANDLOCKACCESSFSMAKEREG for whiteout creation Whiteout objects are used in the upper layer of an OverlayFS to indicate that the file with this name does not exist in the unified view, even if it is present in on...

8.4CVSS6.1AI score0.00126EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•26 views

PT-2026-90276

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Landlock security module regarding the creation of whiteout objects in OverlayFS. Whiteout objects are used in the upper layer of an OverlayFS to indicate that a...

8.4CVSS5.7AI score0.00126EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•9 views

PT-2026-96538

In the Linux kernel, the following vulnerability has been resolved: landlock: Require LANDLOCK ACCESS FS MAKE REG for whiteout creation Whiteout objects are used in the upper layer of an OverlayFS to indicate that the file with this name does not exist in the unified view, even if it is present i...

8.4CVSS5.9AI score0.00126EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/11 12:00 a.m.•4 views

CVE-2026-89560: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: landlock: Require LANDLOCKACCESSFSMAKEREG for whiteout creation Whiteout objects are used in the upper layer of an OverlayFS to indicate that the file with this name does not exist in the unified view, even if it is present in on...

8.4CVSS5.9AI score0.00126EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/18 12:00 a.m.•17 views

PT-2025-38375

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the do rename function when renaming a file within an encrypted directory. The fscrypt setup filename function allocates memory for a filename that is never used,...

5.5CVSS5.5AI score0.00151EPSS
SaveExploits0
Rows per page
Query Builder