CLSA-2026-1782989143

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1782989143.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1782989143
Upstream
Published
2026-07-02T10:46:04Z
Modified
2026-10-26T09:31:13Z
Summary
util-linux: Fix of 4 CVEs
Details
  • CVE-2026-27456: fix TOCTOU symlink race in SUID mount loop device setup that allowed non-root users to access arbitrary root-owned files via symlink swap between path resolution and open
References

Affected packages

TuxCare:AlmaLinux:9.6
libblkid

Package

Name
libblkid
Purl
pkg:rpm/tuxcare/libblkid?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.37.4-21.el9_6.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1782989143.json"
libblkid-devel

Package

Name
libblkid-devel
Purl
pkg:rpm/tuxcare/libblkid-devel?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.37.4-21.el9_6.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1782989143.json"
libfdisk

Package

Name
libfdisk
Purl
pkg:rpm/tuxcare/libfdisk?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.37.4-21.el9_6.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1782989143.json"
libfdisk-devel

Package

Name
libfdisk-devel
Purl
pkg:rpm/tuxcare/libfdisk-devel?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.37.4-21.el9_6.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1782989143.json"
libmount

Package

Name
libmount
Purl
pkg:rpm/tuxcare/libmount?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.37.4-21.el9_6.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1782989143.json"
libmount-devel

Package

Name
libmount-devel
Purl
pkg:rpm/tuxcare/libmount-devel?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.37.4-21.el9_6.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1782989143.json"
libsmartcols

Package

Name
libsmartcols
Purl
pkg:rpm/tuxcare/libsmartcols?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.37.4-21.el9_6.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1782989143.json"
libsmartcols-devel

Package

Name
libsmartcols-devel
Purl
pkg:rpm/tuxcare/libsmartcols-devel?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.37.4-21.el9_6.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1782989143.json"
libuuid

Package

Name
libuuid
Purl
pkg:rpm/tuxcare/libuuid?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.37.4-21.el9_6.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1782989143.json"
libuuid-devel

Package

Name
libuuid-devel
Purl
pkg:rpm/tuxcare/libuuid-devel?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.37.4-21.el9_6.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1782989143.json"
python3-libmount

Package

Name
python3-libmount
Purl
pkg:rpm/tuxcare/python3-libmount?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.37.4-21.el9_6.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1782989143.json"
util-linux

Package

Name
util-linux
Purl
pkg:rpm/tuxcare/util-linux?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.37.4-21.el9_6.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1782989143.json"
util-linux-core

Package

Name
util-linux-core
Purl
pkg:rpm/tuxcare/util-linux-core?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.37.4-21.el9_6.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1782989143.json"
util-linux-user

Package

Name
util-linux-user
Purl
pkg:rpm/tuxcare/util-linux-user?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.37.4-21.el9_6.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1782989143.json"
uuidd

Package

Name
uuidd
Purl
pkg:rpm/tuxcare/uuidd?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.37.4-21.el9_6.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1782989143.json"