RHSA-2026:97522: Important: util-linux security, bug fix, and enhancement update
The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these include the fdisk configuration tool and the login program.Security Fix(es): util-linux: util-linux: heap use-after-free in libblkid nested partition probing (CVE-2026-13595) util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path (CVE-2026-53613) Bug Fix(es) and Enhancement(s): agetty: fix stdin conversion to tty name (JIRA:RHEL-153737) util-linux: script command fails to register pseudo-terminal (pts) , breaking 'who' command output (JIRA:RHEL-192480) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Additional Changes:For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes linked from the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/util-linuxto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9 - Upgrade
Upgrade
redhat/libblkidto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9 - Upgrade
Upgrade
redhat/libblkid-debuginfoto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9 - Upgrade
Upgrade
redhat/libblkid-develto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9 - Upgrade
Upgrade
redhat/libfdiskto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9 - Upgrade
Upgrade
redhat/libfdisk-debuginfoto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9 - Upgrade
Upgrade
redhat/libmountto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9 - Upgrade
Upgrade
redhat/libmount-debuginfoto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9 - Upgrade
Upgrade
redhat/libmount-develto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9 - Upgrade
Upgrade
redhat/libsmartcolsto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9 - Upgrade
Upgrade
redhat/libsmartcols-debuginfoto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9 - Upgrade
Upgrade
redhat/libuuidto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9 - Upgrade
Upgrade
redhat/libuuid-debuginfoto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9 - Upgrade
Upgrade
redhat/libuuid-develto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9 - Upgrade
Upgrade
redhat/python3-libmountto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9 - Upgrade
Upgrade
redhat/python3-libmount-debuginfoto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9 - Upgrade
Upgrade
redhat/util-linux-coreto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9 - Upgrade
Upgrade
redhat/util-linux-core-debuginfoto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9 - Upgrade
Upgrade
redhat/util-linux-debuginfoto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9 - Upgrade
Upgrade
redhat/util-linux-debugsourceto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9 - Upgrade
Upgrade
redhat/util-linux-userto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9 - Upgrade
Upgrade
redhat/util-linux-user-debuginfoto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9 - Upgrade
Upgrade
redhat/uuiddto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9 - Upgrade
Upgrade
redhat/uuidd-debuginfoto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9 - Upgrade
Upgrade
redhat/libblkidto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9.aa - Upgrade
Upgrade
redhat/libblkid-debuginfoto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9.aa - Upgrade
Upgrade
redhat/libblkid-develto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9.aa - Upgrade
Upgrade
redhat/libfdiskto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9.aa - Upgrade
Upgrade
redhat/libfdisk-debuginfoto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9.aa - Upgrade
Upgrade
redhat/libmountto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9.aa - Upgrade
Upgrade
redhat/libmount-debuginfoto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9.aa - Upgrade
Upgrade
redhat/libmount-develto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9.aa - Upgrade
Upgrade
redhat/libsmartcolsto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9.aa - Upgrade
Upgrade
redhat/libsmartcols-debuginfoto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9.aa - Upgrade
Upgrade
redhat/libuuidto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9.aa - Upgrade
Upgrade
redhat/libuuid-debuginfoto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9.aa - Upgrade
Upgrade
redhat/libuuid-develto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9.aa - Upgrade
Upgrade
redhat/python3-libmountto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9.aa - Upgrade
Upgrade
redhat/python3-libmount-debuginfoto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9.aa - Upgrade
Upgrade
redhat/util-linuxto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9.aa - Upgrade
Upgrade
redhat/util-linux-coreto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9.aa - Upgrade
Upgrade
redhat/util-linux-core-debuginfoto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9.aa - Upgrade
Upgrade
redhat/util-linux-debuginfoto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9.aa - Upgrade
Upgrade
redhat/util-linux-debugsourceto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9.aa - Upgrade
Upgrade
redhat/util-linux-userto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9.aa - Upgrade
Upgrade
redhat/util-linux-user-debuginfoto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9.aa - Upgrade
Upgrade
redhat/uuiddto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9.aa - Upgrade
Upgrade
redhat/uuidd-debuginfoto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9.aa - Upgrade
Upgrade
redhat/libfdisk-develto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9 - Upgrade
Upgrade
redhat/libsmartcols-develto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9 - Upgrade
Upgrade
redhat/libfdisk-develto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9.aa - Upgrade
Upgrade
redhat/libsmartcols-develto a version that resolves this vulnerability.Fixed in 2.37.4-28.el9_9.aa