RLSA-2026:97522: Important: util-linux security, bug fix, and enhancement update

Published Nov 13, 2026
·
Updated

The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these include the fdisk configuration tool and the login program.

Security Fix(es):

util-linux: util-linux: heap use-after-free in libblkid nested partition probing (CVE-2026-13595)

util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path (CVE-2026-53613)

Bug Fix(es) and Enhancement(s):

agetty: fix stdin conversion to tty name (JIRA:Rocky Linux-153737)

util-linux: script command fails to register pseudo-terminal (pts) , breaking 'who' command output (JIRA:Rocky Linux-192480)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9 Release Notes linked from the References section.

Affected Software

26 affected componentsFixes available
rocky-linux/libblkid<0:2.37.4-28.el9_9
0:2.37.4-28.el9_9
rocky-linux/libblkid-debuginfo<0:2.37.4-28.el9_9
0:2.37.4-28.el9_9
rocky-linux/libblkid-devel<0:2.37.4-28.el9_9
0:2.37.4-28.el9_9
rocky-linux/libfdisk<0:2.37.4-28.el9_9
0:2.37.4-28.el9_9
rocky-linux/libfdisk-debuginfo<0:2.37.4-28.el9_9
0:2.37.4-28.el9_9
rocky-linux/libfdisk-devel<0:2.37.4-28.el9_9
0:2.37.4-28.el9_9
rocky-linux/libmount<0:2.37.4-28.el9_9
0:2.37.4-28.el9_9
rocky-linux/libmount-debuginfo<0:2.37.4-28.el9_9
0:2.37.4-28.el9_9
rocky-linux/libmount-devel<0:2.37.4-28.el9_9
0:2.37.4-28.el9_9
rocky-linux/libsmartcols<0:2.37.4-28.el9_9
0:2.37.4-28.el9_9
rocky-linux/libsmartcols-debuginfo<0:2.37.4-28.el9_9
0:2.37.4-28.el9_9
rocky-linux/libsmartcols-devel<0:2.37.4-28.el9_9
0:2.37.4-28.el9_9
rocky-linux/libuuid<0:2.37.4-28.el9_9
0:2.37.4-28.el9_9
rocky-linux/libuuid-debuginfo<0:2.37.4-28.el9_9
0:2.37.4-28.el9_9
rocky-linux/libuuid-devel<0:2.37.4-28.el9_9
0:2.37.4-28.el9_9
rocky-linux/python3-libmount<0:2.37.4-28.el9_9
0:2.37.4-28.el9_9
rocky-linux/python3-libmount-debuginfo<0:2.37.4-28.el9_9
0:2.37.4-28.el9_9
rocky-linux/util-linux<0:2.37.4-28.el9_9
0:2.37.4-28.el9_9
rocky-linux/util-linux-core<0:2.37.4-28.el9_9
0:2.37.4-28.el9_9
rocky-linux/util-linux-core-debuginfo<0:2.37.4-28.el9_9
0:2.37.4-28.el9_9
rocky-linux/util-linux-debuginfo<0:2.37.4-28.el9_9
0:2.37.4-28.el9_9
rocky-linux/util-linux-debugsource<0:2.37.4-28.el9_9
0:2.37.4-28.el9_9
rocky-linux/util-linux-user<0:2.37.4-28.el9_9
0:2.37.4-28.el9_9
rocky-linux/util-linux-user-debuginfo<0:2.37.4-28.el9_9
0:2.37.4-28.el9_9
rocky-linux/uuidd<0:2.37.4-28.el9_9
0:2.37.4-28.el9_9
rocky-linux/uuidd-debuginfo<0:2.37.4-28.el9_9
0:2.37.4-28.el9_9

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade rocky-linux/libblkid to a version that resolves this vulnerability.

    Fixed in 0:2.37.4-28.el9_9
  2. Upgrade

    Upgrade rocky-linux/libblkid-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:2.37.4-28.el9_9
  3. Upgrade

    Upgrade rocky-linux/libblkid-devel to a version that resolves this vulnerability.

    Fixed in 0:2.37.4-28.el9_9
  4. Upgrade

    Upgrade rocky-linux/libfdisk to a version that resolves this vulnerability.

    Fixed in 0:2.37.4-28.el9_9
  5. Upgrade

    Upgrade rocky-linux/libfdisk-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:2.37.4-28.el9_9
  6. Upgrade

    Upgrade rocky-linux/libfdisk-devel to a version that resolves this vulnerability.

    Fixed in 0:2.37.4-28.el9_9
  7. Upgrade

    Upgrade rocky-linux/libmount to a version that resolves this vulnerability.

    Fixed in 0:2.37.4-28.el9_9
  8. Upgrade

    Upgrade rocky-linux/libmount-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:2.37.4-28.el9_9
  9. Upgrade

    Upgrade rocky-linux/libmount-devel to a version that resolves this vulnerability.

    Fixed in 0:2.37.4-28.el9_9
  10. Upgrade

    Upgrade rocky-linux/libsmartcols to a version that resolves this vulnerability.

    Fixed in 0:2.37.4-28.el9_9
  11. Upgrade

    Upgrade rocky-linux/libsmartcols-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:2.37.4-28.el9_9
  12. Upgrade

    Upgrade rocky-linux/libsmartcols-devel to a version that resolves this vulnerability.

    Fixed in 0:2.37.4-28.el9_9
  13. Upgrade

    Upgrade rocky-linux/libuuid to a version that resolves this vulnerability.

    Fixed in 0:2.37.4-28.el9_9
  14. Upgrade

    Upgrade rocky-linux/libuuid-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:2.37.4-28.el9_9
  15. Upgrade

    Upgrade rocky-linux/libuuid-devel to a version that resolves this vulnerability.

    Fixed in 0:2.37.4-28.el9_9
  16. Upgrade

    Upgrade rocky-linux/python3-libmount to a version that resolves this vulnerability.

    Fixed in 0:2.37.4-28.el9_9
  17. Upgrade

    Upgrade rocky-linux/python3-libmount-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:2.37.4-28.el9_9
  18. Upgrade

    Upgrade rocky-linux/util-linux to a version that resolves this vulnerability.

    Fixed in 0:2.37.4-28.el9_9
  19. Upgrade

    Upgrade rocky-linux/util-linux-core to a version that resolves this vulnerability.

    Fixed in 0:2.37.4-28.el9_9
  20. Upgrade

    Upgrade rocky-linux/util-linux-core-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:2.37.4-28.el9_9
  21. Upgrade

    Upgrade rocky-linux/util-linux-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:2.37.4-28.el9_9
  22. Upgrade

    Upgrade rocky-linux/util-linux-debugsource to a version that resolves this vulnerability.

    Fixed in 0:2.37.4-28.el9_9
  23. Upgrade

    Upgrade rocky-linux/util-linux-user to a version that resolves this vulnerability.

    Fixed in 0:2.37.4-28.el9_9
  24. Upgrade

    Upgrade rocky-linux/util-linux-user-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:2.37.4-28.el9_9
  25. Upgrade

    Upgrade rocky-linux/uuidd to a version that resolves this vulnerability.

    Fixed in 0:2.37.4-28.el9_9
  26. Upgrade

    Upgrade rocky-linux/uuidd-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:2.37.4-28.el9_9

Event History

Nov 13, 2026
Advisory Published
via OSV·06:05 AM
Data Sourced
via OSV·06:05 AM
DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

1

What access would an attacker need to exploit the known issues?

The advisory rates the issues as requiring local access, low privileges, and high attack complexity. No user interaction is required.

2

Which security impacts are indicated by the advisory?

The supplied CVSS vector indicates high impact to confidentiality, integrity, and availability. The listed flaws are a heap use-after-free in libblkid nested partition probing and a TOCTOU issue in the mount program involving an ancestor-directory swap on a target path.

3

Which Rocky Linux components are included in this update?

The update includes libblkid, libfdisk, and libmount packages, along with their development and debuginfo packages where listed. It also includes util-linux changes affecting agetty and the script command.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203