CVE-2026-53614: Debian/util-linux vulnerability
Last updated 19 August 2026
Other sources
Local Privilege Escalation via LIBMOUNTFORCEMOUNT2 Environment Variable - nosuid/noexec Bypass in SUID mount(8)
— Debian
Affected Software
1 affected componentFixes available
debian/util-linux<=2.41-5
2.36.1-8+deb11u22.38.1-5+deb12u32.38.1-5+deb12u12.41.5-0+deb13u12.42.2-22.42.2-4
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/util-linuxto a version that resolves this vulnerability.Fixed in 2.36.1-8+deb11u2Fixed in 2.38.1-5+deb12u3Fixed in 2.38.1-5+deb12u1Fixed in 2.41.5-0+deb13u1Fixed in 2.42.2-2Fixed in 2.42.2-4
Event History
Aug 31, 2026
CVE Published
via Ubuntu·02:42 PM
Data Sourced
via Ubuntu·02:42 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Debian·02:43 PM
DescriptionAffected Software