8.5
Élevée
CVE-2026-76642 util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks,…
Description
util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| util-linux 2.42 | 2.42 → < 2.42.3 | 2.42.3 |
| util-linux 2.39 | 2.39 → < 2.41.6 | 2.41.6 |
Références
- GitHub Security Advisory (GHSA-m25x-3hj9-m26f) github.com
- Patch Commit github.com
- Patch Commit github.com
- Patch Commit github.com
- github.com github.com
- github.com github.com
- github.com github.com
- VulnCheck Advisory: util-linux libmount Privilege Escalation via Failed Mount Helper www.vulncheck.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de util-linux
Les 7 CVE de util-linux →
CVE-2026-53615
util-linux is a random collection of Linux utilities
8.0
Élevée
CVE-2026-53614
util-linux is a random collection of Linux utilities
7.0
Élevée
CVE-2026-53613
util-linux is a random collection of Linux utilities
7.0
Élevée
CVE-2026-53612
util-linux is a random collection of Linux utilities
7.0
Élevée