CVE-2022-0563

CVE-2022-0563 affects util-linux chfn/chsh utilities when built with Readline. The Readline library may expose data from the INPUTRC file to unprivileged users, enabling reading of root-owned files and potential privilege escalation. Affected versions are prior to 2.37.4. Remediation noted in mul...

CVE-2001-1494

CVE-2001-1494 affects util-linux (and mount) prior to versions updated in RHSA-2005:782. The issue is a hardlink-based flaw in the script command: a local attacker can create a hardlink named typescript in a writable directory, and when the script command is run by root, the attacker’s file can b...

CVE-2026-27456

CVE-2026-27456 affects util-linux mount(8): a TOCTOU race in the SUID mount when setting up loop devices allows a local user to trick mount into opening a root-owned target by replacing the source path during the brief window between validation and open. Exploitation requires an /etc/fstab entry ...

CVE-2020-21583

CVE-2020-21583 affects hwclock.13-v2.27. The issue allows attackers to gain escalated privileges or execute arbitrary commands via the path parameter when setting the date. The affected component is hwclock (part of util-linux). The provided documents do not include explicit exploitation status o...

CVE-2026-13595

CVE-2026-13595 affects libblkid in util-linux. During nested partition probing, BSD/Minix/Solaris x86/UnixWare probers cache a parent partition pointer in a dynamically allocated array; on reallocation, the pointer becomes stale, causing a heap use-after-free read. An attacker with access to a cr...