Vulnerability-Lookup

CVE-2026-53612 (GCVE-0-2026-53612)

Vulnerability from cvelistv5 – Published: 2026-10-14 14:47 – Updated: 2026-10-14 18:26

Title

util-linux mount hook_owner TOCTOU allows local privilege escalation

Summary

util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility's `hook_owner.c` post-mount hook performs path-based `chmod()` and `lchown()` operations on a previously validated mount target. A local low-privileged user authorized by an `/etc/fstab` entry with `user` or `users` and an `X-mount.mode`, `X-mount.owner`, or `X-mount.group` option can use `renameat2(RENAME_EXCHANGE)` to race a writable ancestor of the target and redirect the privileged ownership or mode change to a root-owned path, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.

Severity

7 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-14 18:24 UTC

CWE

CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7712 records in the last 180 days details

References

7 references

URL	Tags
https://github.com/util-linux/util-linux/security…	x_refsource_CONFIRM
https://github.com/util-linux/util-linux/commit/2…	x_refsource_MISC
https://github.com/util-linux/util-linux/commit/7…	x_refsource_MISC
https://github.com/util-linux/util-linux/commit/8…	x_refsource_MISC
https://github.com/util-linux/util-linux/commit/d…	x_refsource_MISC
https://github.com/util-linux/util-linux/releases…	x_refsource_MISC
https://github.com/util-linux/util-linux/releases…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version	CPE status
util-linux	util-linux	Affected: >= 2.39, < 2.41.5 Affected: >= 2.42, < 2.42.2	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-53612",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-14T18:24:31.298549Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-14T18:26:36.386Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "util-linux",
          "vendor": "util-linux",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 2.39, \u003c 2.41.5"
            },
            {
              "status": "affected",
              "version": "\u003e= 2.42, \u003c 2.42.2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility\u0027s `hook_owner.c` post-mount hook performs path-based `chmod()` and `lchown()` operations on a previously validated mount target. A local low-privileged user authorized by an `/etc/fstab` entry with `user` or `users` and an `X-mount.mode`, `X-mount.owner`, or `X-mount.group` option can use `renameat2(RENAME_EXCHANGE)` to race a writable ancestor of the target and redirect the privileged ownership or mode change to a root-owned path, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-367",
              "description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-14T14:47:25.523Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh"
        },
        {
          "name": "https://github.com/util-linux/util-linux/commit/24da33905c7115c4cbccd0afb2a469804e96467a",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/util-linux/util-linux/commit/24da33905c7115c4cbccd0afb2a469804e96467a"
        },
        {
          "name": "https://github.com/util-linux/util-linux/commit/722c96974dd4009a334e4aee556eedaab5fb94b4",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/util-linux/util-linux/commit/722c96974dd4009a334e4aee556eedaab5fb94b4"
        },
        {
          "name": "https://github.com/util-linux/util-linux/commit/897a08c2b11dfa66975c3d24d63c7bf5f5be1a7c",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/util-linux/util-linux/commit/897a08c2b11dfa66975c3d24d63c7bf5f5be1a7c"
        },
        {
          "name": "https://github.com/util-linux/util-linux/commit/d0c5adaeb3a3d823aba1377794de8f009b8152cc",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/util-linux/util-linux/commit/d0c5adaeb3a3d823aba1377794de8f009b8152cc"
        },
        {
          "name": "https://github.com/util-linux/util-linux/releases/tag/v2.41.5",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/util-linux/util-linux/releases/tag/v2.41.5"
        },
        {
          "name": "https://github.com/util-linux/util-linux/releases/tag/v2.42.2",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/util-linux/util-linux/releases/tag/v2.42.2"
        }
      ],
      "source": {
        "advisory": "GHSA-g8wm-75wr-g2vh",
        "discovery": "UNKNOWN"
      },
      "title": "util-linux mount hook_owner TOCTOU allows local privilege escalation"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-53612",
    "datePublished": "2026-10-14T14:47:25.523Z",
    "dateReserved": "2026-06-09T19:39:52.405Z",
    "dateUpdated": "2026-10-14T18:26:36.386Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-53612",
      "date": "2026-10-16",
      "epss": "0.00115",
      "percentile": "0.0146"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "product": "util-linux",
                "vendor": "util-linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "\u003e= 2.39, \u003c 2.41.5"
                  },
                  {
                    "status": "affected",
                    "version": "\u003e= 2.42, \u003c 2.42.2"
                  }
                ]
              }
            ],
            "source": "security-advisories@github.com"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility\u0027s `hook_owner.c` post-mount hook performs path-based `chmod()` and `lchown()` operations on a previously validated mount target. A local low-privileged user authorized by an `/etc/fstab` entry with `user` or `users` and an `X-mount.mode`, `X-mount.owner`, or `X-mount.group` option can use `renameat2(RENAME_EXCHANGE)` to race a writable ancestor of the target and redirect the privileged ownership or mode change to a root-owned path, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2."
          }
        ],
        "id": "CVE-2026-53612",
        "lastModified": "2026-10-14T19:17:17.210",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.0,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.0,
              "impactScore": 5.9,
              "source": "security-advisories@github.com",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2026-53612",
                "options": [
                  {
                    "exploitation": "poc"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-14T18:24:31.298549Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2026-10-14T15:17:20.260",
        "references": [
          {
            "source": "security-advisories@github.com",
            "url": "https://github.com/util-linux/util-linux/commit/24da33905c7115c4cbccd0afb2a469804e96467a"
          },
          {
            "source": "security-advisories@github.com",
            "url": "https://github.com/util-linux/util-linux/commit/722c96974dd4009a334e4aee556eedaab5fb94b4"
          },
          {
            "source": "security-advisories@github.com",
            "url": "https://github.com/util-linux/util-linux/commit/897a08c2b11dfa66975c3d24d63c7bf5f5be1a7c"
          },
          {
            "source": "security-advisories@github.com",
            "url": "https://github.com/util-linux/util-linux/commit/d0c5adaeb3a3d823aba1377794de8f009b8152cc"
          },
          {
            "source": "security-advisories@github.com",
            "url": "https://github.com/util-linux/util-linux/releases/tag/v2.41.5"
          },
          {
            "source": "security-advisories@github.com",
            "url": "https://github.com/util-linux/util-linux/releases/tag/v2.42.2"
          },
          {
            "source": "security-advisories@github.com",
            "url": "https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh"
          },
          {
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
            "url": "https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh"
          }
        ],
        "sourceIdentifier": "security-advisories@github.com",
        "vulnStatus": "Received",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-367"
              }
            ],
            "source": "security-advisories@github.com",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Important",
      "current_release_date": "2026-10-14T16:18:28+00:00",
      "cve": "CVE-2026-53612",
      "id": "CVE-2026-53612",
      "initial_release_date": "2026-06-16T00:00:00+00:00",
      "product_status:known_affected": "15",
      "product_status:known_not_affected": "45",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53612.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-53612",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-10-14T18:24:31.298549Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-10-14T18:26:09.495Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "references": [
              {
                "tags": [
                  "exploit"
                ],
                "url": "https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh"
              }
            ],
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "util-linux",
              "vendor": "util-linux",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003e= 2.39, \u003c 2.41.5"
                },
                {
                  "status": "affected",
                  "version": "\u003e= 2.42, \u003c 2.42.2"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility\u0027s `hook_owner.c` post-mount hook performs path-based `chmod()` and `lchown()` operations on a previously validated mount target. A local low-privileged user authorized by an `/etc/fstab` entry with `user` or `users` and an `X-mount.mode`, `X-mount.owner`, or `X-mount.group` option can use `renameat2(RENAME_EXCHANGE)` to race a writable ancestor of the target and redirect the privileged ownership or mode change to a root-owned path, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-367",
                  "description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-10-14T14:47:25.523Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh"
            },
            {
              "name": "https://github.com/util-linux/util-linux/commit/24da33905c7115c4cbccd0afb2a469804e96467a",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/util-linux/util-linux/commit/24da33905c7115c4cbccd0afb2a469804e96467a"
            },
            {
              "name": "https://github.com/util-linux/util-linux/commit/722c96974dd4009a334e4aee556eedaab5fb94b4",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/util-linux/util-linux/commit/722c96974dd4009a334e4aee556eedaab5fb94b4"
            },
            {
              "name": "https://github.com/util-linux/util-linux/commit/897a08c2b11dfa66975c3d24d63c7bf5f5be1a7c",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/util-linux/util-linux/commit/897a08c2b11dfa66975c3d24d63c7bf5f5be1a7c"
            },
            {
              "name": "https://github.com/util-linux/util-linux/commit/d0c5adaeb3a3d823aba1377794de8f009b8152cc",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/util-linux/util-linux/commit/d0c5adaeb3a3d823aba1377794de8f009b8152cc"
            },
            {
              "name": "https://github.com/util-linux/util-linux/releases/tag/v2.41.5",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/util-linux/util-linux/releases/tag/v2.41.5"
            },
            {
              "name": "https://github.com/util-linux/util-linux/releases/tag/v2.42.2",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/util-linux/util-linux/releases/tag/v2.42.2"
            }
          ],
          "source": {
            "advisory": "GHSA-g8wm-75wr-g2vh",
            "discovery": "UNKNOWN"
          },
          "title": "util-linux mount hook_owner TOCTOU allows local privilege escalation"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2026-53612",
        "datePublished": "2026-10-14T14:47:25.523Z",
        "dateReserved": "2026-06-09T19:39:52.405Z",
        "dateUpdated": "2026-10-14T18:26:36.386Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

CERTFR-2026-AVI-1068

Vulnerability from certfr_avis - Published: 2026-08-21 - Updated: 2026-08-21

De multiples vulnérabilités ont été découvertes dans le noyau Linux de Debian. Elles permettent à un attaquant de provoquer une élévation de privilèges.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

	Vendor	Product	Description
	Debian	Debian	Debian trixie versions antérieures à 2.41.5-0+deb13u1

References

Title

Publication Time

FKIE_CVE-2026-53612

Vulnerability from fkie_nvd - Published: 2026-10-14 15:17 - Updated: 2026-10-14 19:17

Severity

7.0 (High) - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Summary

References

	URL	Tags
	security-advisories@github.com	https://github.com/util-linux/util-linux/commit/24da33905c7115c4cbccd0afb2a469804e96467a
	security-advisories@github.com	https://github.com/util-linux/util-linux/commit/722c96974dd4009a334e4aee556eedaab5fb94b4
	security-advisories@github.com	https://github.com/util-linux/util-linux/commit/897a08c2b11dfa66975c3d24d63c7bf5f5be1a7c
	security-advisories@github.com	https://github.com/util-linux/util-linux/commit/d0c5adaeb3a3d823aba1377794de8f009b8152cc
	security-advisories@github.com	https://github.com/util-linux/util-linux/releases/tag/v2.41.5
	security-advisories@github.com	https://github.com/util-linux/util-linux/releases/tag/v2.42.2
	security-advisories@github.com	https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh
	134c704f-9b21-4f2e-91b3-4a467353bcc0	https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "util-linux",
          "vendor": "util-linux",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 2.39, \u003c 2.41.5"
            },
            {
              "status": "affected",
              "version": "\u003e= 2.42, \u003c 2.42.2"
            }
          ]
        }
      ],
      "source": "security-advisories@github.com"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility\u0027s `hook_owner.c` post-mount hook performs path-based `chmod()` and `lchown()` operations on a previously validated mount target. A local low-privileged user authorized by an `/etc/fstab` entry with `user` or `users` and an `X-mount.mode`, `X-mount.owner`, or `X-mount.group` option can use `renameat2(RENAME_EXCHANGE)` to race a writable ancestor of the target and redirect the privileged ownership or mode change to a root-owned path, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2."
    }
  ],
  "id": "CVE-2026-53612",
  "lastModified": "2026-10-14T19:17:17.210",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.0,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.0,
        "impactScore": 5.9,
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-53612",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-10-14T18:24:31.298549Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-10-14T15:17:20.260",
  "references": [
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/util-linux/util-linux/commit/24da33905c7115c4cbccd0afb2a469804e96467a"
    },
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/util-linux/util-linux/commit/722c96974dd4009a334e4aee556eedaab5fb94b4"
    },
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/util-linux/util-linux/commit/897a08c2b11dfa66975c3d24d63c7bf5f5be1a7c"
    },
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/util-linux/util-linux/commit/d0c5adaeb3a3d823aba1377794de8f009b8152cc"
    },
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/util-linux/util-linux/releases/tag/v2.41.5"
    },
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/util-linux/util-linux/releases/tag/v2.42.2"
    },
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh"
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "url": "https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh"
    }
  ],
  "sourceIdentifier": "security-advisories@github.com",
  "vulnStatus": "Received",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-367"
        }
      ],
      "source": "security-advisories@github.com",
      "type": "Secondary"
    }
  ]
}

OESA-2026-3980 (CVE-2026-53612)

Vulnerability from osv_openeuler – Published: 2026-09-20 13:23 – Updated: 2026-09-20 13:23 – Source website

Summary

util-linux security update

Details

The util-linux package contains a random collection of files that implements some low-level basic linux utilities.

Security Fix(es):

CVE-2026-53612 has no publicly disclosed vulnerability details yet. It is only indexed by the Snyk data source. Details are pending disclosure.(CVE-2026-53612)

When an /etc/fstab entry is configured with the user or users option, mount(8) validates the target path before performing the mount syscall, creating a Time-of-Check-Time-of-Use (TOCTOU) window. A local unprivileged user with write access to an ancestor directory of the mount target can swap that directory to redirect the mount to an arbitrary root-owned location, potentially escalating privileges to root.(CVE-2026-53613)

A flaw was found in util-linux. The mount(8) SUID binary does not sanitize the LIBMOUNT_FORCE_MOUNT2 environment variable before use. A local unprivileged user can set this variable to force mount(8) to use the legacy two-step mount(2) code path, which applies security restrictions such as nosuid and noexec after the mount is already active. During this window, an attacker can execute a SUID binary from the mounted filesystem, allowing local privilege escalation to root. Affected versions: util-linux v2.39.1 through v2.43-devel (current master).(CVE-2026-53614)

A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.(CVE-2026-78410)

Severity

7.8 (High)


                    
                      CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

URL

Type

	https://www.openeuler.org/zh/security/security-bu…	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2026-53612	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2026-53613	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2026-53614	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2026-78410	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "aarch64": [
          "libblkid-2.39.1-44.oe2403sp1.aarch64.rpm",
          "libfdisk-2.39.1-44.oe2403sp1.aarch64.rpm",
          "libmount-2.39.1-44.oe2403sp1.aarch64.rpm",
          "libsmartcols-2.39.1-44.oe2403sp1.aarch64.rpm",
          "libuuid-2.39.1-44.oe2403sp1.aarch64.rpm",
          "python3-libmount-2.39.1-44.oe2403sp1.aarch64.rpm",
          "util-linux-2.39.1-44.oe2403sp1.aarch64.rpm",
          "util-linux-debuginfo-2.39.1-44.oe2403sp1.aarch64.rpm",
          "util-linux-debugsource-2.39.1-44.oe2403sp1.aarch64.rpm",
          "util-linux-devel-2.39.1-44.oe2403sp1.aarch64.rpm",
          "util-linux-user-2.39.1-44.oe2403sp1.aarch64.rpm",
          "uuidd-2.39.1-44.oe2403sp1.aarch64.rpm"
        ],
        "noarch": [
          "util-linux-help-2.39.1-44.oe2403sp1.noarch.rpm"
        ],
        "src": [
          "util-linux-2.39.1-44.oe2403sp1.src.rpm"
        ],
        "x86_64": [
          "libblkid-2.39.1-44.oe2403sp1.x86_64.rpm",
          "libfdisk-2.39.1-44.oe2403sp1.x86_64.rpm",
          "libmount-2.39.1-44.oe2403sp1.x86_64.rpm",
          "libsmartcols-2.39.1-44.oe2403sp1.x86_64.rpm",
          "libuuid-2.39.1-44.oe2403sp1.x86_64.rpm",
          "python3-libmount-2.39.1-44.oe2403sp1.x86_64.rpm",
          "util-linux-2.39.1-44.oe2403sp1.x86_64.rpm",
          "util-linux-debuginfo-2.39.1-44.oe2403sp1.x86_64.rpm",
          "util-linux-debugsource-2.39.1-44.oe2403sp1.x86_64.rpm",
          "util-linux-devel-2.39.1-44.oe2403sp1.x86_64.rpm",
          "util-linux-user-2.39.1-44.oe2403sp1.x86_64.rpm",
          "uuidd-2.39.1-44.oe2403sp1.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:24.03-LTS-SP1",
        "name": "util-linux",
        "purl": "pkg:rpm/openEuler/util-linux\u0026distro=openEuler-24.03-LTS-SP1"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.39.1-44.oe2403sp1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "High"
  },
  "details": "The util-linux package contains a random collection of files that implements some low-level basic linux utilities.\r\n\r\nSecurity Fix(es):\n\nCVE-2026-53612 has no publicly disclosed vulnerability details yet. It is only indexed by the Snyk data source. Details are pending disclosure.(CVE-2026-53612)\n\nWhen an /etc/fstab entry is configured with the user or users option, mount(8) validates the target path before performing the mount syscall, creating a Time-of-Check-Time-of-Use (TOCTOU) window. A local unprivileged user with write access to an ancestor directory of the mount target can swap that directory to redirect the mount to an arbitrary root-owned location, potentially escalating privileges to root.(CVE-2026-53613)\n\nA flaw was found in util-linux. The mount(8) SUID binary does not sanitize the LIBMOUNT_FORCE_MOUNT2 environment variable before use. A local unprivileged user can set this variable to force mount(8) to use the legacy two-step mount(2) code path, which applies security restrictions such as nosuid and noexec after the mount is already active. During this window, an attacker can execute a SUID binary from the mounted filesystem, allowing local privilege escalation to root. Affected versions: util-linux v2.39.1 through v2.43-devel (current master).(CVE-2026-53614)\n\nA flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.(CVE-2026-78410)",
  "id": "OESA-2026-3980",
  "modified": "2026-09-20T13:23:47Z",
  "published": "2026-09-20T13:23:47Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3980"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53612"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53613"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53614"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-78410"
    }
  ],
  "schema_version": "1.7.2",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "util-linux security update",
  "upstream": [
    "CVE-2026-53612",
    "CVE-2026-53613",
    "CVE-2026-53614",
    "CVE-2026-78410"
  ]
}

OESA-2026-3981 (CVE-2026-53612)

Vulnerability from osv_openeuler – Published: 2026-09-20 13:23 – Updated: 2026-09-20 13:23 – Source website

Summary

util-linux security update

Details

The util-linux package contains a random collection of files that implements some low-level basic linux utilities.

Security Fix(es):

CVE-2026-53612 has no publicly disclosed vulnerability details yet. It is only indexed by the Snyk data source. Details are pending disclosure.(CVE-2026-53612)

util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.(CVE-2026-76642)

Severity

7.8 (High)


                    
                      CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

URL

Type

	https://www.openeuler.org/zh/security/security-bu…	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2026-53612	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2026-53613	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2026-53614	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2026-76642	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2026-78410	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "aarch64": [
          "libblkid-2.39.1-44.oe2403sp3.aarch64.rpm",
          "libfdisk-2.39.1-44.oe2403sp3.aarch64.rpm",
          "libmount-2.39.1-44.oe2403sp3.aarch64.rpm",
          "libsmartcols-2.39.1-44.oe2403sp3.aarch64.rpm",
          "libuuid-2.39.1-44.oe2403sp3.aarch64.rpm",
          "python3-libmount-2.39.1-44.oe2403sp3.aarch64.rpm",
          "util-linux-2.39.1-44.oe2403sp3.aarch64.rpm",
          "util-linux-debuginfo-2.39.1-44.oe2403sp3.aarch64.rpm",
          "util-linux-debugsource-2.39.1-44.oe2403sp3.aarch64.rpm",
          "util-linux-devel-2.39.1-44.oe2403sp3.aarch64.rpm",
          "util-linux-user-2.39.1-44.oe2403sp3.aarch64.rpm",
          "uuidd-2.39.1-44.oe2403sp3.aarch64.rpm"
        ],
        "noarch": [
          "util-linux-help-2.39.1-44.oe2403sp3.noarch.rpm"
        ],
        "src": [
          "util-linux-2.39.1-44.oe2403sp3.src.rpm"
        ],
        "x86_64": [
          "libblkid-2.39.1-44.oe2403sp3.x86_64.rpm",
          "libfdisk-2.39.1-44.oe2403sp3.x86_64.rpm",
          "libmount-2.39.1-44.oe2403sp3.x86_64.rpm",
          "libsmartcols-2.39.1-44.oe2403sp3.x86_64.rpm",
          "libuuid-2.39.1-44.oe2403sp3.x86_64.rpm",
          "python3-libmount-2.39.1-44.oe2403sp3.x86_64.rpm",
          "util-linux-2.39.1-44.oe2403sp3.x86_64.rpm",
          "util-linux-debuginfo-2.39.1-44.oe2403sp3.x86_64.rpm",
          "util-linux-debugsource-2.39.1-44.oe2403sp3.x86_64.rpm",
          "util-linux-devel-2.39.1-44.oe2403sp3.x86_64.rpm",
          "util-linux-user-2.39.1-44.oe2403sp3.x86_64.rpm",
          "uuidd-2.39.1-44.oe2403sp3.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:24.03-LTS-SP3",
        "name": "util-linux",
        "purl": "pkg:rpm/openEuler/util-linux\u0026distro=openEuler-24.03-LTS-SP3"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.39.1-44.oe2403sp3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "High"
  },
  "details": "The util-linux package contains a random collection of files that implements some low-level basic linux utilities.\r\n\r\nSecurity Fix(es):\n\nCVE-2026-53612 has no publicly disclosed vulnerability details yet. It is only indexed by the Snyk data source. Details are pending disclosure.(CVE-2026-53612)\n\nWhen an /etc/fstab entry is configured with the user or users option, mount(8) validates the target path before performing the mount syscall, creating a Time-of-Check-Time-of-Use (TOCTOU) window. A local unprivileged user with write access to an ancestor directory of the mount target can swap that directory to redirect the mount to an arbitrary root-owned location, potentially escalating privileges to root.(CVE-2026-53613)\n\nA flaw was found in util-linux. The mount(8) SUID binary does not sanitize the LIBMOUNT_FORCE_MOUNT2 environment variable before use. A local unprivileged user can set this variable to force mount(8) to use the legacy two-step mount(2) code path, which applies security restrictions such as nosuid and noexec after the mount is already active. During this window, an attacker can execute a SUID binary from the mounted filesystem, allowing local privilege escalation to root. Affected versions: util-linux v2.39.1 through v2.43-devel (current master).(CVE-2026-53614)\n\nutil-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.(CVE-2026-76642)\n\nA flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.(CVE-2026-78410)",
  "id": "OESA-2026-3981",
  "modified": "2026-09-20T13:23:47Z",
  "published": "2026-09-20T13:23:47Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3981"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53612"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53613"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53614"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76642"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-78410"
    }
  ],
  "schema_version": "1.7.2",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "util-linux security update",
  "upstream": [
    "CVE-2026-53612",
    "CVE-2026-53613",
    "CVE-2026-53614",
    "CVE-2026-76642",
    "CVE-2026-78410"
  ]
}

OESA-2026-4073 (CVE-2026-53612)

Vulnerability from osv_openeuler – Published: 2026-09-25 01:28 – Updated: 2026-09-25 01:28 – Source website

Summary

util-linux security update

Details

The util-linux package contains a random collection of files that implements some low-level basic linux utilities.

Security Fix(es):

CVE-2026-53612 has no publicly disclosed vulnerability details yet. It is only indexed by the Snyk data source. Details are pending disclosure.(CVE-2026-53612)

Severity

7.8 (High)


                    
                      CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

URL

Type

	https://www.openeuler.org/zh/security/security-bu…	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2026-53612	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2026-53613	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2026-53614	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2026-78410	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "aarch64": [
          "libblkid-2.39.1-44.oe2403sp4.aarch64.rpm",
          "libfdisk-2.39.1-44.oe2403sp4.aarch64.rpm",
          "libmount-2.39.1-44.oe2403sp4.aarch64.rpm",
          "libsmartcols-2.39.1-44.oe2403sp4.aarch64.rpm",
          "libuuid-2.39.1-44.oe2403sp4.aarch64.rpm",
          "python3-libmount-2.39.1-44.oe2403sp4.aarch64.rpm",
          "util-linux-2.39.1-44.oe2403sp4.aarch64.rpm",
          "util-linux-debuginfo-2.39.1-44.oe2403sp4.aarch64.rpm",
          "util-linux-debugsource-2.39.1-44.oe2403sp4.aarch64.rpm",
          "util-linux-devel-2.39.1-44.oe2403sp4.aarch64.rpm",
          "util-linux-user-2.39.1-44.oe2403sp4.aarch64.rpm",
          "uuidd-2.39.1-44.oe2403sp4.aarch64.rpm"
        ],
        "noarch": [
          "util-linux-help-2.39.1-44.oe2403sp4.noarch.rpm"
        ],
        "src": [
          "util-linux-2.39.1-44.oe2403sp4.src.rpm"
        ],
        "x86_64": [
          "libblkid-2.39.1-44.oe2403sp4.x86_64.rpm",
          "libfdisk-2.39.1-44.oe2403sp4.x86_64.rpm",
          "libmount-2.39.1-44.oe2403sp4.x86_64.rpm",
          "libsmartcols-2.39.1-44.oe2403sp4.x86_64.rpm",
          "libuuid-2.39.1-44.oe2403sp4.x86_64.rpm",
          "python3-libmount-2.39.1-44.oe2403sp4.x86_64.rpm",
          "util-linux-2.39.1-44.oe2403sp4.x86_64.rpm",
          "util-linux-debuginfo-2.39.1-44.oe2403sp4.x86_64.rpm",
          "util-linux-debugsource-2.39.1-44.oe2403sp4.x86_64.rpm",
          "util-linux-devel-2.39.1-44.oe2403sp4.x86_64.rpm",
          "util-linux-user-2.39.1-44.oe2403sp4.x86_64.rpm",
          "uuidd-2.39.1-44.oe2403sp4.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:24.03-LTS-SP4",
        "name": "util-linux",
        "purl": "pkg:rpm/openEuler/util-linux\u0026distro=openEuler-24.03-LTS-SP4"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.39.1-44.oe2403sp4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "High"
  },
  "details": "The util-linux package contains a random collection of files that implements some low-level basic linux utilities.\r\n\r\nSecurity Fix(es):\n\nCVE-2026-53612 has no publicly disclosed vulnerability details yet. It is only indexed by the Snyk data source. Details are pending disclosure.(CVE-2026-53612)\n\nWhen an /etc/fstab entry is configured with the user or users option, mount(8) validates the target path before performing the mount syscall, creating a Time-of-Check-Time-of-Use (TOCTOU) window. A local unprivileged user with write access to an ancestor directory of the mount target can swap that directory to redirect the mount to an arbitrary root-owned location, potentially escalating privileges to root.(CVE-2026-53613)\n\nA flaw was found in util-linux. The mount(8) SUID binary does not sanitize the LIBMOUNT_FORCE_MOUNT2 environment variable before use. A local unprivileged user can set this variable to force mount(8) to use the legacy two-step mount(2) code path, which applies security restrictions such as nosuid and noexec after the mount is already active. During this window, an attacker can execute a SUID binary from the mounted filesystem, allowing local privilege escalation to root. Affected versions: util-linux v2.39.1 through v2.43-devel (current master).(CVE-2026-53614)\n\nA flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.(CVE-2026-78410)",
  "id": "OESA-2026-4073",
  "modified": "2026-09-25T01:28:04Z",
  "published": "2026-09-25T01:28:04Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4073"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53612"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53613"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53614"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-78410"
    }
  ],
  "schema_version": "1.7.2",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "util-linux security update",
  "upstream": [
    "CVE-2026-53612",
    "CVE-2026-53613",
    "CVE-2026-53614",
    "CVE-2026-78410"
  ]
}

OPENSUSE-SU-2026:11408-1

Vulnerability from csaf_opensuse - Published: 2026-07-29 00:00 - Updated: 2026-10-15 09:49

Summary

libblkid-devel-2.42.2-1.1 on GA media

Severity

Moderate

Scope

4 vulnerabilities in this advisory, including CVE-2026-53612.

CVE-2026-53612

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Recommended: 108 products

Open the full advisory

OPENSUSE-SU-2026:21905-1

Vulnerability from csaf_opensuse - Published: 2026-09-22 07:23 - Updated: 2026-10-15 09:50

Summary

Security update for util-linux

Severity

Important

Scope

8 vulnerabilities in this advisory, including CVE-2026-53612.

CVE-2026-53612

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Recommended: 94 products

Open the full advisory

SUSE-SU-2026:23250-1

Vulnerability from csaf_suse - Published: 2026-08-21 14:17 - Updated: 2026-10-15 09:47

Summary

Security update for util-linux

Severity

Important

Scope

5 vulnerabilities in this advisory, including CVE-2026-53612.

CVE-2026-53612

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Recommended: 21 products

Open the full advisory

SUSE-SU-2026:23255-1

Vulnerability from csaf_suse - Published: 2026-08-24 15:02 - Updated: 2026-10-15 09:47

Summary

Security update for util-linux

Severity

Important

Scope

5 vulnerabilities in this advisory, including CVE-2026-53612.

CVE-2026-53612

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Recommended: 36 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2026-53612 (GCVE-0-2026-53612)

CERTFR-2026-AVI-1068

Solutions

FKIE_CVE-2026-53612

OESA-2026-3980 (CVE-2026-53612)

OESA-2026-3981 (CVE-2026-53612)

OESA-2026-4073 (CVE-2026-53612)

OPENSUSE-SU-2026:11408-1

OPENSUSE-SU-2026:21905-1

SUSE-SU-2026:23250-1

SUSE-SU-2026:23255-1

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour