4 matches found
CVE-2022-0563
CVE-2022-0563 affects util-linux chfn/chsh utilities when built with Readline. The Readline library may expose data from the INPUTRC file to unprivileged users, enabling reading of root-owned files and potential privilege escalation. Affected versions are prior to 2.37.4. Remediation noted in mul...
CVE-2001-1494
CVE-2001-1494 affects util-linux (and mount) prior to versions updated in RHSA-2005:782. The issue is a hardlink-based flaw in the script command: a local attacker can create a hardlink named typescript in a writable directory, and when the script command is run by root, the attacker’s file can b...
CVE-2020-21583
CVE-2020-21583 affects hwclock.13-v2.27. The issue allows attackers to gain escalated privileges or execute arbitrary commands via the path parameter when setting the date. The affected component is hwclock (part of util-linux). The provided documents do not include explicit exploitation status o...
CVE-2026-27456
CVE-2026-27456 affects util-linux mount(8): a TOCTOU race in the SUID mount when setting up loop devices allows a local user to trick mount into opening a root-owned target by replacing the source path during the brief window between validation and open. Exploitation requires an /etc/fstab entry ...