https://seclists.org/oss-sec/2026/q3/655: Vulnerability fixes in util-linux-2.42.3
Published Sep 5, 2026
·Updated
Affected Software
1 affected component
util-linux util-linux=2.42.3
Frequently Asked Questions
1
What conditions could allow the leaked file descriptors to matter?
The issue can occur when nsenter or unshare creates file descriptors and then executes another program, allowing those descriptors to remain open across exec. The advisory does not specify which descriptors or downstream programs are affected.
2
Is the released change complete for all maintained branches?
The 2.42.3 release adds O_CLOEXEC as a defense-in-depth measure in nsenter and unshare. The notice also states that stable branches require a follow-up fix, but does not identify the affected branch versions.