Util-linux vulnerabilities
We track 5 vulnerabilities in Util-linux products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on October 14, 2026.
Latest Util-linux vulnerabilities
- 8.0 High severity
util-linux: Integer Overflow or Wraparound
util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the
- 7.0 High severity
util-linux: Improper Privilege Management
util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility reads the attacker-controlled `LIBMOUNT_FORCE_MOUNT2` environment variable with `getenv()`, allowing a local low-privile
- 7.0 High severity
util-linux: Time-of-check Time-of-use (TOCTOU) Race Condition
util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before
- 7.0 High severity
util-linux: Time-of-check Time-of-use (TOCTOU) Race Condition
util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility's `hook_owner.c` post-mount hook performs path-based `chmod()` and `lchown()` operations on a previously validated mount t
- 7.8 High severity
util-linux: Detection of Error Condition Without Action
util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner