RLSA-2026:96212: Important: util-linux security update

Q: Does exploitation require an authenticated account or user interaction?

The supplied severity vector indicates local access is required, but no privileges or user interaction are required. It also indicates low attack complexity.

Q: What is the likely security impact if exploited?

The supplied vector indicates low confidentiality impact and high integrity and availability impact. The listed flaws include a heap use-after-free, a mount-path TOCTOU condition, and an integer overflow in DOS partition parsing.

Q: Can affected or fixed package versions be identified from this advisory data?

No affected-version range or fixed util-linux package version is provided in the supplied data. Validate installed Rocky Linux util-linux packages against the vendor erratum before closing remediation.

Published Nov 10, 2026

Updated

The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these include the fdisk configuration tool and the login program.

Security Fix(es):

util-linux: util-linux: heap use-after-free in libblkid nested partition probing (CVE-2026-13595)

util-linux: TOCTOU in the mount program via ancestor directory swap on target path (CVE-2026-53613)

util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser (CVE-2026-53615)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

1 affected componentFixes available

rocky-linux/util-linux<0:2.32.1-50.el8_10

0:2.32.1-50.el8_10

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade rocky-linux/util-linux to a version that resolves this vulnerability.
Fixed in 0:2.32.1-50.el8_10

Event History

Nov 10, 2026

Advisory Published

via OSV·12:01 PM

Data Sourced

via OSV·12:01 PM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

Does exploitation require an authenticated account or user interaction?

The supplied severity vector indicates local access is required, but no privileges or user interaction are required. It also indicates low attack complexity.

What is the likely security impact if exploited?

The supplied vector indicates low confidentiality impact and high integrity and availability impact. The listed flaws include a heap use-after-free, a mount-path TOCTOU condition, and an integer overflow in DOS partition parsing.

Can affected or fixed package versions be identified from this advisory data?

No affected-version range or fixed util-linux package version is provided in the supplied data. Validate installed Rocky Linux util-linux packages against the vendor erratum before closing remediation.

RLSA-2026:96212: Important: util-linux security update

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Does exploitation require an authenticated account or user interaction?

What is the likely security impact if exploited?

Can affected or fixed package versions be identified from this advisory data?

Company

Resources

Contact

Frequently Asked Questions

Does exploitation require an authenticated account or user interaction?

What is the likely security impact if exploited?

Can affected or fixed package versions be identified from this advisory data?