UBUNTU-CVE-2026-53612

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2026-53612

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-53612.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2026-53612

Upstream

CVE-2026-53612

Downstream

USN-8702-1

Related

USN-8702-1

Published

2026-06-18T00:00:00Z

Modified

2026-08-31T22:15:26Z

Severity

Ubuntu - medium

Summary

[none]

Details

[Local Privilege Escalation via TOCTOU in mount(8) hook_owner.c chmod/chown]

References

Affected packages

Ubuntu:24.04:LTS / util-linux

Package

Name: util-linux
Purl: pkg:deb/ubuntu/util-linux?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.39.3-9ubuntu6.6

Affected versions

2.*

2.39.1-4ubuntu2

2.39.2-6ubuntu1

2.39.3-6ubuntu2

2.39.3-9ubuntu2

2.39.3-9ubuntu4

2.39.3-9ubuntu6

2.39.3-9ubuntu6.1

2.39.3-9ubuntu6.2

2.39.3-9ubuntu6.3

2.39.3-9ubuntu6.4

2.39.3-9ubuntu6.5

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "bsdextrautils",
            "binary_version": "2.39.3-9ubuntu6.6"
        },
        {
            "binary_name": "bsdutils",
            "binary_version": "1:2.39.3-9ubuntu6.6"
        },
        {
            "binary_name": "eject",
            "binary_version": "2.39.3-9ubuntu6.6"
        },
        {
            "binary_name": "fdisk",
            "binary_version": "2.39.3-9ubuntu6.6"
        },
        {
            "binary_name": "libblkid1",
            "binary_version": "2.39.3-9ubuntu6.6"
        },
        {
            "binary_name": "libfdisk1",
            "binary_version": "2.39.3-9ubuntu6.6"
        },
        {
            "binary_name": "libmount1",
            "binary_version": "2.39.3-9ubuntu6.6"
        },
        {
            "binary_name": "libsmartcols1",
            "binary_version": "2.39.3-9ubuntu6.6"
        },
        {
            "binary_name": "libuuid1",
            "binary_version": "2.39.3-9ubuntu6.6"
        },
        {
            "binary_name": "mount",
            "binary_version": "2.39.3-9ubuntu6.6"
        },
        {
            "binary_name": "rfkill",
            "binary_version": "2.39.3-9ubuntu6.6"
        },
        {
            "binary_name": "util-linux",
            "binary_version": "2.39.3-9ubuntu6.6"
        },
        {
            "binary_name": "util-linux-extra",
            "binary_version": "2.39.3-9ubuntu6.6"
        },
        {
            "binary_name": "util-linux-locales",
            "binary_version": "2.39.3-9ubuntu6.6"
        },
        {
            "binary_name": "uuid-runtime",
            "binary_version": "2.39.3-9ubuntu6.6"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-53612.json"

Ubuntu:25.10 / util-linux

Package

Name: util-linux
Purl: pkg:deb/ubuntu/util-linux?arch=source&distro=questing

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.40.2-14ubuntu1

2.41-4ubuntu2

2.41-4ubuntu3

2.41-4ubuntu4

2.41-4ubuntu4.1

2.41-4ubuntu4.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "bsdextrautils",
            "binary_version": "2.41-4ubuntu4.2"
        },
        {
            "binary_name": "bsdutils",
            "binary_version": "1:2.41-4ubuntu4.2"
        },
        {
            "binary_name": "eject",
            "binary_version": "2.41-4ubuntu4.2"
        },
        {
            "binary_name": "fdisk",
            "binary_version": "2.41-4ubuntu4.2"
        },
        {
            "binary_name": "lastlog2",
            "binary_version": "2.41-4ubuntu4.2"
        },
        {
            "binary_name": "libblkid1",
            "binary_version": "2.41-4ubuntu4.2"
        },
        {
            "binary_name": "libfdisk1",
            "binary_version": "2.41-4ubuntu4.2"
        },
        {
            "binary_name": "liblastlog2-2",
            "binary_version": "2.41-4ubuntu4.2"
        },
        {
            "binary_name": "libmount1",
            "binary_version": "2.41-4ubuntu4.2"
        },
        {
            "binary_name": "libpam-lastlog2",
            "binary_version": "2.41-4ubuntu4.2"
        },
        {
            "binary_name": "libsmartcols1",
            "binary_version": "2.41-4ubuntu4.2"
        },
        {
            "binary_name": "libuuid1",
            "binary_version": "2.41-4ubuntu4.2"
        },
        {
            "binary_name": "login",
            "binary_version": "1:4.16.0-2+really2.41-4ubuntu4.2"
        },
        {
            "binary_name": "mount",
            "binary_version": "2.41-4ubuntu4.2"
        },
        {
            "binary_name": "rfkill",
            "binary_version": "2.41-4ubuntu4.2"
        },
        {
            "binary_name": "util-linux",
            "binary_version": "2.41-4ubuntu4.2"
        },
        {
            "binary_name": "util-linux-extra",
            "binary_version": "2.41-4ubuntu4.2"
        },
        {
            "binary_name": "util-linux-locales",
            "binary_version": "2.41-4ubuntu4.2"
        },
        {
            "binary_name": "uuid-runtime",
            "binary_version": "2.41-4ubuntu4.2"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-53612.json"

Ubuntu:26.04:LTS / util-linux

Package

Name: util-linux
Purl: pkg:deb/ubuntu/util-linux?arch=source&distro=resolute

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.41.3-3ubuntu2.2

Affected versions

2.*

2.41-4ubuntu4

2.41.2-4ubuntu1

2.41.2-4ubuntu2

2.41.2-4ubuntu3

2.41.3-3ubuntu1

2.41.3-3ubuntu2

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "bsdextrautils",
            "binary_version": "2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "bsdutils",
            "binary_version": "1:2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "eject",
            "binary_version": "2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "fdisk",
            "binary_version": "2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "lastlog2",
            "binary_version": "2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "libblkid1",
            "binary_version": "2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "libfdisk1",
            "binary_version": "2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "liblastlog2-2",
            "binary_version": "2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "libmount1",
            "binary_version": "2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "libpam-lastlog2",
            "binary_version": "2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "libsmartcols1",
            "binary_version": "2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "libuuid1",
            "binary_version": "2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "login",
            "binary_version": "1:4.16.0-2+really2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "mount",
            "binary_version": "2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "rfkill",
            "binary_version": "2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "util-linux",
            "binary_version": "2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "util-linux-extra",
            "binary_version": "2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "util-linux-locales",
            "binary_version": "2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "uuid-runtime",
            "binary_version": "2.41.3-3ubuntu2.2"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-53612.json"