CVE-2026-53614

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-53614
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53614.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-53614
Aliases
  • GHSA-67r7-8m5w-22wx
Downstream
ALPINE (1)
BELL (1)
DEBIAN (1)
ECHO (1)
OESA (3)
openSUSE (2)
SUSE (7)
UBUNTU (1)
Related
openSUSE (2)
SUSE (7)
Published
2026-10-14T15:40:53Z
Modified
2026-10-15T02:47:39Z
Severity
  • 7.0 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
util-linux LIBMOUNT_FORCE_MOUNT2 allows nosuid and noexec bypass
Details

util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID mount utility reads the attacker-controlled LIBMOUNT_FORCE_MOUNT2 environment variable with getenv(), allowing a local low-privileged user to force the non-atomic legacy bind-mount path. With an /etc/fstab bind mount authorized by user or users and protected by nosuid, noexec, or nodev, an attacker can race the window between the initial bind mount and the remount that applies those security flags and execute a SUID program from the temporarily unprotected mount, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.

Database specific 
{
    "cna_assigner":  "GitHub_M",
    "cwe_ids":  [
        "CWE-269",
        "CWE-807"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53614.json"
}
References

Affected packages

Git / github.com/util-linux/util-linux

Affected ranges

Type
GIT
Repo
https://github.com/util-linux/util-linux
Events
Introduced
e98ef85a8f934bccac2b984422a40f92955ac97d
Fixed
230de59ffbee328506d92d3534e66d56de1afe5d
Introduced
0a7dfc376192e8fb1e7bdb2d0c90d8b9b173a42b
Fixed
f44509230b9f8224993b8c6157f85888359a64e1
Database specific
Show details 
{
    "extracted_events":  [
        {
            "introduced":  "2.39.1"
        },
        {
            "fixed":  "2.41.5"
        },
        {
            "introduced":  "2.42"
        },
        {
            "fixed":  "2.42.2"
        }
    ],
    "source":  "AFFECTED_FIELD"
}

Affected versions

v2.*
v2.41
v2.41-rc1
v2.41-rc2
v2.41.1
v2.41.2
v2.41.2-rc1
v2.41.3
v2.41.4
v2.42
v2.42-rc1
v2.42-rc2
v2.42-start
v2.42.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53614.json"