8.5
High
CVE-2026-76642 util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks,…
Description
util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| util-linux 2.42 | 2.42 → < 2.42.3 | 2.42.3 |
| util-linux 2.39 | 2.39 → < 2.41.6 | 2.41.6 |
Other CVEs of util-linux
The 7 CVEs of util-linux →
CVE-2026-53615
util-linux is a random collection of Linux utilities
8.0
High
CVE-2026-53614
util-linux is a random collection of Linux utilities
7.0
High
CVE-2026-53613
util-linux is a random collection of Linux utilities
7.0
High
CVE-2026-53612
util-linux is a random collection of Linux utilities
7.0
High