DEBIAN-CVE-2026-53612

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/CVE-2026-53612
Import Source
https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-53612.json
JSON Data
https://api.osv.dev/v1/vulns/DEBIAN-CVE-2026-53612
Upstream
Published
2026-10-14T15:17:20Z
Modified
2026-10-15T05:01:30Z
Severity
  • 7.0 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID mount utility's hook_owner.c post-mount hook performs path-based chmod() and lchown() operations on a previously validated mount target. A local low-privileged user authorized by an /etc/fstab entry with user or users and an X-mount.mode, X-mount.owner, or X-mount.group option can use renameat2(RENAME_EXCHANGE) to race a writable ancestor of the target and redirect the privileged ownership or mode change to a root-owned path, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.

References

Affected packages

Debian:13 / util-linux

Package

Name
util-linux
Purl
pkg:deb/debian/util-linux?arch=source&distro=trixie

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.41.5-0+deb13u1

Affected versions

2.*
2.41-5
2.41.1-1
2.41.1-2
2.41.1-3
2.41.1-4
2.41.2-1
2.41.2-2
2.41.2-3
2.41.2-4
2.41.3-1
2.41.3-2
2.41.3-3
2.41.3-4

Ecosystem specific 

{
    "urgency":  "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-53612.json"

Debian:14 / util-linux

Package

Name
util-linux
Purl
pkg:deb/debian/util-linux?arch=source&distro=forky

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.42.2-1

Affected versions

2.*
2.41-5
2.41.1-1
2.41.1-2
2.41.1-3
2.41.1-4
2.41.2-1
2.41.2-2
2.41.2-3
2.41.2-4
2.41.3-1
2.41.3-2
2.41.3-3
2.41.3-4
2.42~rc1-1
2.42~rc1-2
2.42~rc1-3
2.42~rc2-1
2.42-1
2.42-2
2.42-3
2.42-4
2.42-5
2.42-6
2.42.1-1
2.42.1-2
2.42.1-3
2.42.1-4
2.42.1-5
2.42.1-6

Ecosystem specific 

{
    "urgency":  "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-53612.json"