UBUNTU-CVE-2026-53614

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2026-53614
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-53614.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2026-53614
Upstream
Downstream
Related
Published
2026-06-18T00:00:00Z
Modified
2026-10-28T20:17:47Z
Severity
  • 7.0 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
  • Ubuntu - medium
Summary
[none]
Details

util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID mount utility reads the attacker-controlled LIBMOUNT_FORCE_MOUNT2 environment variable with getenv(), allowing a local low-privileged user to force the non-atomic legacy bind-mount path. With an /etc/fstab bind mount authorized by user or users and protected by nosuid, noexec, or nodev, an attacker can race the window between the initial bind mount and the remount that applies those security flags and execute a SUID program from the temporarily unprotected mount, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.

References

Affected packages

Ubuntu:24.04:LTS / util-linux

Package

Name
util-linux
Purl
pkg:deb/ubuntu/util-linux?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.39.3-9ubuntu6.6

Affected versions

2.*
2.39.1-4ubuntu2
2.39.2-6ubuntu1
2.39.3-6ubuntu2
2.39.3-9ubuntu2
2.39.3-9ubuntu4
2.39.3-9ubuntu6
2.39.3-9ubuntu6.1
2.39.3-9ubuntu6.2
2.39.3-9ubuntu6.3
2.39.3-9ubuntu6.4
2.39.3-9ubuntu6.5

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "bsdextrautils",
            "binary_version": "2.39.3-9ubuntu6.6"
        },
        {
            "binary_name": "bsdutils",
            "binary_version": "1:2.39.3-9ubuntu6.6"
        },
        {
            "binary_name": "eject",
            "binary_version": "2.39.3-9ubuntu6.6"
        },
        {
            "binary_name": "fdisk",
            "binary_version": "2.39.3-9ubuntu6.6"
        },
        {
            "binary_name": "libblkid1",
            "binary_version": "2.39.3-9ubuntu6.6"
        },
        {
            "binary_name": "libfdisk1",
            "binary_version": "2.39.3-9ubuntu6.6"
        },
        {
            "binary_name": "libmount1",
            "binary_version": "2.39.3-9ubuntu6.6"
        },
        {
            "binary_name": "libsmartcols1",
            "binary_version": "2.39.3-9ubuntu6.6"
        },
        {
            "binary_name": "libuuid1",
            "binary_version": "2.39.3-9ubuntu6.6"
        },
        {
            "binary_name": "mount",
            "binary_version": "2.39.3-9ubuntu6.6"
        },
        {
            "binary_name": "rfkill",
            "binary_version": "2.39.3-9ubuntu6.6"
        },
        {
            "binary_name": "util-linux",
            "binary_version": "2.39.3-9ubuntu6.6"
        },
        {
            "binary_name": "util-linux-extra",
            "binary_version": "2.39.3-9ubuntu6.6"
        },
        {
            "binary_name": "util-linux-locales",
            "binary_version": "2.39.3-9ubuntu6.6"
        },
        {
            "binary_name": "uuid-runtime",
            "binary_version": "2.39.3-9ubuntu6.6"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-53614.json"

Ubuntu:25.10 / util-linux

Package

Name
util-linux
Purl
pkg:deb/ubuntu/util-linux?arch=source&distro=questing

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

2.*
2.40.2-14ubuntu1
2.41-4ubuntu2
2.41-4ubuntu3
2.41-4ubuntu4
2.41-4ubuntu4.1
2.41-4ubuntu4.2

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "bsdextrautils",
            "binary_version": "2.41-4ubuntu4.2"
        },
        {
            "binary_name": "bsdutils",
            "binary_version": "1:2.41-4ubuntu4.2"
        },
        {
            "binary_name": "eject",
            "binary_version": "2.41-4ubuntu4.2"
        },
        {
            "binary_name": "fdisk",
            "binary_version": "2.41-4ubuntu4.2"
        },
        {
            "binary_name": "lastlog2",
            "binary_version": "2.41-4ubuntu4.2"
        },
        {
            "binary_name": "libblkid1",
            "binary_version": "2.41-4ubuntu4.2"
        },
        {
            "binary_name": "libfdisk1",
            "binary_version": "2.41-4ubuntu4.2"
        },
        {
            "binary_name": "liblastlog2-2",
            "binary_version": "2.41-4ubuntu4.2"
        },
        {
            "binary_name": "libmount1",
            "binary_version": "2.41-4ubuntu4.2"
        },
        {
            "binary_name": "libpam-lastlog2",
            "binary_version": "2.41-4ubuntu4.2"
        },
        {
            "binary_name": "libsmartcols1",
            "binary_version": "2.41-4ubuntu4.2"
        },
        {
            "binary_name": "libuuid1",
            "binary_version": "2.41-4ubuntu4.2"
        },
        {
            "binary_name": "login",
            "binary_version": "1:4.16.0-2+really2.41-4ubuntu4.2"
        },
        {
            "binary_name": "mount",
            "binary_version": "2.41-4ubuntu4.2"
        },
        {
            "binary_name": "rfkill",
            "binary_version": "2.41-4ubuntu4.2"
        },
        {
            "binary_name": "util-linux",
            "binary_version": "2.41-4ubuntu4.2"
        },
        {
            "binary_name": "util-linux-extra",
            "binary_version": "2.41-4ubuntu4.2"
        },
        {
            "binary_name": "util-linux-locales",
            "binary_version": "2.41-4ubuntu4.2"
        },
        {
            "binary_name": "uuid-runtime",
            "binary_version": "2.41-4ubuntu4.2"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-53614.json"

Ubuntu:26.10 / util-linux

Package

Name
util-linux
Purl
pkg:deb/ubuntu/util-linux?arch=source&distro=stonking

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

2.*
2.41.3-3ubuntu2
2.42.2-1ubuntu2

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "bsdextrautils",
            "binary_version": "2.42.2-1ubuntu2"
        },
        {
            "binary_name": "bsdutils",
            "binary_version": "1:2.42.2-1ubuntu2"
        },
        {
            "binary_name": "eject",
            "binary_version": "2.42.2-1ubuntu2"
        },
        {
            "binary_name": "fdisk",
            "binary_version": "2.42.2-1ubuntu2"
        },
        {
            "binary_name": "lastlog2",
            "binary_version": "2.42.2-1ubuntu2"
        },
        {
            "binary_name": "libblkid1",
            "binary_version": "2.42.2-1ubuntu2"
        },
        {
            "binary_name": "libfdisk1",
            "binary_version": "2.42.2-1ubuntu2"
        },
        {
            "binary_name": "liblastlog2-2",
            "binary_version": "2.42.2-1ubuntu2"
        },
        {
            "binary_name": "libmount1",
            "binary_version": "2.42.2-1ubuntu2"
        },
        {
            "binary_name": "libpam-lastlog2",
            "binary_version": "2.42.2-1ubuntu2"
        },
        {
            "binary_name": "libsmartcols1",
            "binary_version": "2.42.2-1ubuntu2"
        },
        {
            "binary_name": "libuuid1",
            "binary_version": "2.42.2-1ubuntu2"
        },
        {
            "binary_name": "login",
            "binary_version": "1:4.16.0-2+really2.42.2-1ubuntu2"
        },
        {
            "binary_name": "mount",
            "binary_version": "2.42.2-1ubuntu2"
        },
        {
            "binary_name": "rfkill",
            "binary_version": "2.42.2-1ubuntu2"
        },
        {
            "binary_name": "util-linux",
            "binary_version": "2.42.2-1ubuntu2"
        },
        {
            "binary_name": "util-linux-extra",
            "binary_version": "2.42.2-1ubuntu2"
        },
        {
            "binary_name": "util-linux-locales",
            "binary_version": "2.42.2-1ubuntu2"
        },
        {
            "binary_name": "uuid-runtime",
            "binary_version": "2.42.2-1ubuntu2"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-53614.json"

Ubuntu:26.04:LTS / util-linux

Package

Name
util-linux
Purl
pkg:deb/ubuntu/util-linux?arch=source&distro=resolute

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.41.3-3ubuntu2.2

Affected versions

2.*
2.41-4ubuntu4
2.41.2-4ubuntu1
2.41.2-4ubuntu2
2.41.2-4ubuntu3
2.41.3-3ubuntu1
2.41.3-3ubuntu2

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "bsdextrautils",
            "binary_version": "2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "bsdutils",
            "binary_version": "1:2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "eject",
            "binary_version": "2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "fdisk",
            "binary_version": "2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "lastlog2",
            "binary_version": "2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "libblkid1",
            "binary_version": "2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "libfdisk1",
            "binary_version": "2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "liblastlog2-2",
            "binary_version": "2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "libmount1",
            "binary_version": "2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "libpam-lastlog2",
            "binary_version": "2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "libsmartcols1",
            "binary_version": "2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "libuuid1",
            "binary_version": "2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "login",
            "binary_version": "1:4.16.0-2+really2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "mount",
            "binary_version": "2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "rfkill",
            "binary_version": "2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "util-linux",
            "binary_version": "2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "util-linux-extra",
            "binary_version": "2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "util-linux-locales",
            "binary_version": "2.41.3-3ubuntu2.2"
        },
        {
            "binary_name": "uuid-runtime",
            "binary_version": "2.41.3-3ubuntu2.2"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-53614.json"