RLSA-2026:93461: Important: util-linux security update
The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these include the fdisk configuration tool and the login program.
Security Fix(es):
util-linux: TOCTOU in the mount program when setting up loop devices (CVE-2026-27456)
util-linux: util-linux: heap use-after-free in libblkid nested partition probing (CVE-2026-13595)
util-linux: TOCTOU in the mount program via ancestor directory swap on target path (CVE-2026-53613)
util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes (CVE-2026-53612)
util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNTFORCEMOUNT2 (CVE-2026-53614)
util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks (CVE-2026-76642)
util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority (CVE-2026-78408)
util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection (CVE-2026-78410)
util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser (CVE-2026-53615)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
rocky-linux/util-linuxto a version that resolves this vulnerability.Fixed in 0:2.40.2-18.el10_2.20
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What level of access does the supplied severity vector indicate for exploitation?
The supplied vector indicates a local attack vector, with no privileges or user interaction required. It does not indicate that the listed issues are remotely exploitable over the network.