https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 11:44:06 +0000 https://db.gcve.eu/vuln/bdu:2026-12870 bdu:2026-12870 https://db.gcve.eu/vuln/bdu:2026-12870 https://db.gcve.eu/vuln/certfr-2026-avi-1068 certfr-2026-avi-1068 https://db.gcve.eu/vuln/certfr-2026-avi-1068 https://db.gcve.eu/vuln/oesa-2026-3978 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: util-linux</p> <p>The util-linux package contains a random collection of files that implements some low-level basic linux utilities. Security Fix(es):</p> <p>When an /etc/fstab entry is configured with the user or users option, mount(8) validates the target path before performing the mount syscall, creating a Time-of-Check-Time-of-Use (TOCTOU) window. A local unprivileged user with write access to an ancestor directory of the mount target can swap that directory to redirect the mount to an arbitrary root-owned location, potentially escalating privileges to root.(CVE-2026-53613)</p> <p>A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.(CVE-2026-78410)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: util-linux</p> <p>The util-linux package contains a random collection of files that implements some low-level basic linux utilities. Security Fix(es):</p> <p>When an /etc/fstab entry is configured with the user or users option, mount(8) validates the target path before performing the mount syscall, creating a Time-of-Check-Time-of-Use (TOCTOU) window. A local unprivileged user with write access to an ancestor directory of the mount target can swap that directory to redirect the mount to an arbitrary root-owned location, potentially escalating privileges to root.(CVE-2026-53613)</p> <p>A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.(CVE-2026-78410)</p> https://db.gcve.eu/vuln/oesa-2026-3978 https://db.gcve.eu/vuln/opensuse-su-2026:11408-1 <p>libblkid-devel-2.42.2-1.1 on GA media</p> <p>libblkid-devel-2.42.2-1.1 on GA media</p> https://db.gcve.eu/vuln/opensuse-su-2026:11408-1 https://db.gcve.eu/vuln/suse-su-2026:23250-1 <p>Security update for util-linux</p> <p>Security update for util-linux</p> https://db.gcve.eu/vuln/suse-su-2026:23250-1 https://db.gcve.eu/vuln/ubuntu-cve-2026-53613 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: util-linux, Ubuntu:Pro:16.04:LTS: util-linux, Ubuntu:18.04:LTS: util-linux, Ubuntu:Pro:20.04:LTS: util-linux, Ubuntu:22.04:LTS: util-linux, Ubuntu:24.04:LTS: util-linux, Ubuntu:25.10: util-linux, Ubuntu:26.04:LTS: util-linux</p> <p>[Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection]</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: util-linux, Ubuntu:Pro:16.04:LTS: util-linux, Ubuntu:18.04:LTS: util-linux, Ubuntu:Pro:20.04:LTS: util-linux, Ubuntu:22.04:LTS: util-linux, Ubuntu:24.04:LTS: util-linux, Ubuntu:25.10: util-linux, Ubuntu:26.04:LTS: util-linux</p> <p>[Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection]</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-53613 https://db.gcve.eu/vuln/wid-sec-w-2026-2938 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in util-linux ausnutzen, um Administratorrechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder einen Denial-of-Service-Zustand auszulösen.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in util-linux ausnutzen, um Administratorrechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder einen Denial-of-Service-Zustand auszulösen.</p> https://db.gcve.eu/vuln/wid-sec-w-2026-2938