CVE-2024-28085

Wall-Escape CVE-2024-28085 The util-linux wall command does not filter escape sequences from command line arguments. The vulnerable code was introduced in commit cdd3cc7fa4 2013. Every version since has been vulnerable. A full report can be found here. I have nicknamed this bug "WallEscape". This...

CVE-2026-53613-poc

CVE-2026-53613 PoC TOCTOU vulnerability in mount8 allowing local privilege escalation to root. Vulnerable Versions util-linux 2.41.0 through 2.41.4 util-linux 2.42.0 through 2.42.1 Exploits File| Method| Target ---|---|--- exploitshell.sh| SSH key extraction| /root exploitdirectshell.sh| Direct...

util-linux security update

An update is available for util-linux. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The util-linux packages contain a large variety of low-level system...

RLSA-2026:98519 Important: util-linux security update

The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these include the fdisk configuration tool and the login program. Security Fixes: util-linux: util-linux: Partition metadata compromise via integer overfl...

util-linux security, bug fix, and enhancement update

An update is available for util-linux. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The util-linux packages contain a large variety of low-level system...

RLSA-2026:97522 Important: util-linux security, bug fix, and enhancement update

The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these include the fdisk configuration tool and the login program. Security Fixes: util-linux: util-linux: heap use-after-free in libblkid nested partition...

util-linux: TOCTOU in the mount program via ancestor directory swap on target path

When an /etc/fstab entry is configured with the user or users option, mount8 validates the target path before performing the mount syscall, creating a Time-of-Check-Time-of-Use TOCTOU window. A local unprivileged user with write access to an ancestor directory of the mount target can swap that...

util-linux: util-linux: heap use-after-free in libblkid nested partition probing

A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a parent partition entry in a dynamically allocated array. When subsequent partition additions cause the array to be...

Important: Red Hat Security Advisory: util-linux security update

An update for util-linux is now available for Red Hat Enterprise Linux 9.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser

A flaw was found in util-linux. An integer overflow vulnerability in the partition parsing library libblkid fails to properly enforce boundary checks on extended partition entries. A local attacker could exploit this flaw by presenting a crafted disk image or removable storage device for probing,...

RHEL 9 : util-linux (RHSA-2026:99119)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:99119 advisory. The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among...

Important: Red Hat Security Advisory: util-linux security update

An update for util-linux is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser

A flaw was found in util-linux. An integer overflow vulnerability in the partition parsing library libblkid fails to properly enforce boundary checks on extended partition entries. A local attacker could exploit this flaw by presenting a crafted disk image or removable storage device for probing,...

util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser

A flaw was found in util-linux. An integer overflow vulnerability in the partition parsing library libblkid fails to properly enforce boundary checks on extended partition entries. A local attacker could exploit this flaw by presenting a crafted disk image or removable storage device for probing,...

Important: Red Hat Security Advisory: util-linux security update

An update for util-linux is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

RHEL 9 : util-linux (RHSA-2026:98519)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:98519 advisory. The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these...

RHEL 10 : util-linux (RHSA-2026:98630)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:98630 advisory. The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, thes...

Oracle Linux 8 : util-linux (ELSA-2026-96212)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-96212 advisory. - fix RHEL-283368 - libblkid: validate EBR data CVE-2026-53615 - fix RHEL-215636 - libblkid: use-after-free in nested partition probing CVE-2026-13595...

Rocky Linux 8 [CIQ] Security Update: libblkid / libblkid-debuginfo / libblkid-devel / libfdisk / etc Multiple Vulnerabilities (crlsa-2026_96212)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202696212 advisory. util-linux: util-linux: heap use-after-free in libblkid nested partition probing CVE-2026-13595 util-linux: TOCTOU in the mount program via ancestor...

util-linux: util-linux: heap use-after-free in libblkid nested partition probing

A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a parent partition entry in a dynamically allocated array. When subsequent partition additions cause the array to be...