OESA-2026-3722 util-linux security update

The util-linux package contains a random collection of files that implements some low-level basic linux utilities. Security Fixes: util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privilege...

CVE-2024-28085

Wall-Escape CVE-2024-28085 El comando wall de util-linux no filtra las secuencias de escape de los argumentos de la línea de comandos. El código vulnerable se introdujo en el commit cdd3cc7fa4 2013. Todas las versiones posteriores han sido vulnerables. Un informe completo se puede encontrar aquí...

CVE-2026-53613-poc

CVE-2026-53613 PoC TOCTOU vulnerability in mount8 allowing local privilege escalation to root. Vulnerable Versions util-linux 2.41.0 through 2.41.4 util-linux 2.42.0 through 2.42.1 Exploits File| Method| Target ---|---|--- exploitshell.sh| SSH key extraction| /root exploitdirectshell.sh| Direct...

ROOT-OS-DEBIAN-13-CVE-2026-53615 CVE-2026-53615 in util-linux - Patched by Root

Root has patched CVE-2026-53615 in the util-linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-3184 CVE-2026-3184 in util-linux - Patched by Root

Root has patched CVE-2026-3184 in the util-linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-53615 CVE-2026-53615 in util-linux - Patched by Root

Root has patched CVE-2026-53615 in the util-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-13595 CVE-2026-13595 in util-linux - Patched by Root

Root has patched CVE-2026-13595 in the util-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-14104 CVE-2025-14104 in util-linux - Patched by Root

Root has patched CVE-2025-14104 in the util-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-27456 CVE-2026-27456 in util-linux - Patched by Root

Root has patched CVE-2026-27456 in the util-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-13595 CVE-2026-13595 in util-linux - Patched by Root

Root has patched CVE-2026-13595 in the util-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-3184 CVE-2026-3184 in util-linux - Patched by Root

Root has patched CVE-2026-3184 in the util-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2022-0563 CVE-2022-0563 in util-linux - Patched by Root

Root has patched CVE-2022-0563 in the util-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-27456 CVE-2026-27456 in util-linux - Patched by Root

Root has patched CVE-2026-27456 in the util-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-53615 CVE-2026-53615 in util-linux - Patched by Root

Root has patched CVE-2026-53615 in the util-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-14104 CVE-2025-14104 in util-linux - Patched by Root

Root has patched CVE-2025-14104 in the util-linux package for Root:Debian:12. Multiple fixed versions available...

Astra Linux – Vulnerability in util-linux

No description...

CVE-2026-76642

util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with...

AZL-99081 CVE-2026-76642 affecting package util-linux 2.40.2-5

util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with...

util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority

The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve. Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an...

util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection

A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount8 to bind another host directory. If the fst...