https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 22:02:08 +0000 https://db.gcve.eu/vuln/certfr-2026-avi-1068 certfr-2026-avi-1068 https://db.gcve.eu/vuln/certfr-2026-avi-1068 https://db.gcve.eu/vuln/oesa-2026-3980 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: util-linux</p> <p>The util-linux package contains a random collection of files that implements some low-level basic linux utilities. Security Fix(es):</p> <p>CVE-2026-53612 has no publicly disclosed vulnerability details yet. It is only indexed by the Snyk data source. Details are pending disclosure.(CVE-2026-53612)</p> <p>When an /etc/fstab entry is configured with the user or users option, mount(8) validates the target path before performing the mount syscall, creating a Time-of-Check-Time-of-Use (TOCTOU) window. A local unprivileged user with write access to an ancestor directory of the mount target can swap that directory to redirect the mount to an arbitrary root-owned location, potentially escalating privileges to root.(CVE-2026-53613)</p> <p>A flaw was found in util-linux. The mount(8) SUID binary does not sanitize the LIBMOUNT_FORCE_MOUNT2 environment variable before use. A local unprivileged user can set this variable to force mount(8) to use the legacy two-step mount(2) code path, which applies security restrictions such as nosuid and noexec after the mount is already active. During this window, an attacker can execute a SUID binary from the mounted filesystem, allowing local privilege escalation to root. Affected versions: util-linux v2.39.1 through v2.43-devel (current master).(CVE-2026-53614)</p> <p>A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized sour…</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: util-linux</p> <p>The util-linux package contains a random collection of files that implements some low-level basic linux utilities. Security Fix(es):</p> <p>CVE-2026-53612 has no publicly disclosed vulnerability details yet. It is only indexed by the Snyk data source. Details are pending disclosure.(CVE-2026-53612)</p> <p>When an /etc/fstab entry is configured with the user or users option, mount(8) validates the target path before performing the mount syscall, creating a Time-of-Check-Time-of-Use (TOCTOU) window. A local unprivileged user with write access to an ancestor directory of the mount target can swap that directory to redirect the mount to an arbitrary root-owned location, potentially escalating privileges to root.(CVE-2026-53613)</p> <p>A flaw was found in util-linux. The mount(8) SUID binary does not sanitize the LIBMOUNT_FORCE_MOUNT2 environment variable before use. A local unprivileged user can set this variable to force mount(8) to use the legacy two-step mount(2) code path, which applies security restrictions such as nosuid and noexec after the mount is already active. During this window, an attacker can execute a SUID binary from the mounted filesystem, allowing local privilege escalation to root. Affected versions: util-linux v2.39.1 through v2.43-devel (current master).(CVE-2026-53614)</p> <p>A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized sour…</p> https://db.gcve.eu/vuln/oesa-2026-3980 https://db.gcve.eu/vuln/opensuse-su-2026:11408-1 <p>libblkid-devel-2.42.2-1.1 on GA media</p> <p>libblkid-devel-2.42.2-1.1 on GA media</p> https://db.gcve.eu/vuln/opensuse-su-2026:11408-1 https://db.gcve.eu/vuln/suse-su-2026:23250-1 <p>Security update for util-linux</p> <p>Security update for util-linux</p> https://db.gcve.eu/vuln/suse-su-2026:23250-1 https://db.gcve.eu/vuln/ubuntu-cve-2026-53614 <p><strong>Affected:</strong> Ubuntu:24.04:LTS: util-linux, Ubuntu:25.10: util-linux, Ubuntu:26.04:LTS: util-linux</p> <p>[Local Privilege Escalation via LIBMOUNT_FORCE_MOUNT2 Environment Variable - nosuid/noexec Bypass in SUID mount(8)]</p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: util-linux, Ubuntu:25.10: util-linux, Ubuntu:26.04:LTS: util-linux</p> <p>[Local Privilege Escalation via LIBMOUNT_FORCE_MOUNT2 Environment Variable - nosuid/noexec Bypass in SUID mount(8)]</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-53614 https://db.gcve.eu/vuln/wid-sec-w-2026-2938 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in util-linux ausnutzen, um Administratorrechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder einen Denial-of-Service-Zustand auszulösen.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in util-linux ausnutzen, um Administratorrechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder einen Denial-of-Service-Zustand auszulösen.</p> https://db.gcve.eu/vuln/wid-sec-w-2026-2938