USN-8091-1

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/notices/USN-8091-1

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8091-1.json

JSON Data

https://api.osv.dev/v1/vulns/USN-8091-1

Published

2026-03-12T19:59:51Z

Modified

2026-04-22T11:07:02.475047Z

Summary

util-linux vulnerability

Details

It was discovered that the util-linux su utility did not drop capabilities when being used with the --pty option. While not a security issue by itself, a local attacker could possibly use the su tool to exploit vulnerabilities in other applications.

References

Affected packages

Ubuntu:Pro:20.04:LTS / util-linux

Package

Name: util-linux
Purl: pkg:deb/ubuntu/util-linux@2.34-0.1ubuntu9.6+esm1?arch=source&distro=esm-infra/focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.34-0.1ubuntu9.6+esm1

Affected versions

2.*

2.34-0.1ubuntu2

2.34-0.1ubuntu4

2.34-0.1ubuntu5

2.34-0.1ubuntu6

2.34-0.1ubuntu7

2.34-0.1ubuntu8

2.34-0.1ubuntu9

2.34-0.1ubuntu9.1

2.34-0.1ubuntu9.3

2.34-0.1ubuntu9.4

2.34-0.1ubuntu9.5

2.34-0.1ubuntu9.6

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_version": "1:2.34-0.1ubuntu9.6+esm1",
            "binary_name": "bsdutils"
        },
        {
            "binary_version": "2.34-0.1ubuntu9.6+esm1",
            "binary_name": "fdisk"
        },
        {
            "binary_version": "2.34-0.1ubuntu9.6+esm1",
            "binary_name": "libblkid1"
        },
        {
            "binary_version": "2.34-0.1ubuntu9.6+esm1",
            "binary_name": "libfdisk1"
        },
        {
            "binary_version": "2.34-0.1ubuntu9.6+esm1",
            "binary_name": "libmount1"
        },
        {
            "binary_version": "2.34-0.1ubuntu9.6+esm1",
            "binary_name": "libsmartcols1"
        },
        {
            "binary_version": "2.34-0.1ubuntu9.6+esm1",
            "binary_name": "libuuid1"
        },
        {
            "binary_version": "2.34-0.1ubuntu9.6+esm1",
            "binary_name": "mount"
        },
        {
            "binary_version": "2.34-0.1ubuntu9.6+esm1",
            "binary_name": "rfkill"
        },
        {
            "binary_version": "2.34-0.1ubuntu9.6+esm1",
            "binary_name": "util-linux"
        },
        {
            "binary_version": "2.34-0.1ubuntu9.6+esm1",
            "binary_name": "util-linux-locales"
        },
        {
            "binary_version": "2.34-0.1ubuntu9.6+esm1",
            "binary_name": "uuid-runtime"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8091-1.json"

cves_map

{
    "ecosystem": "Ubuntu:Pro:20.04:LTS",
    "cves": []
}

Ubuntu:22.04:LTS / util-linux

Package

Name: util-linux
Purl: pkg:deb/ubuntu/util-linux@2.37.2-4ubuntu3.5?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.37.2-4ubuntu3.5

Affected versions

2.*

2.36.1-8ubuntu1

2.37.2-4ubuntu1

2.37.2-4ubuntu2

2.37.2-4ubuntu3

2.37.2-4ubuntu3.3

2.37.2-4ubuntu3.4

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "2.37.2-4ubuntu3.5",
            "binary_name": "bsdextrautils"
        },
        {
            "binary_version": "1:2.37.2-4ubuntu3.5",
            "binary_name": "bsdutils"
        },
        {
            "binary_version": "2.37.2-4ubuntu3.5",
            "binary_name": "eject"
        },
        {
            "binary_version": "2.37.2-4ubuntu3.5",
            "binary_name": "fdisk"
        },
        {
            "binary_version": "2.37.2-4ubuntu3.5",
            "binary_name": "libblkid1"
        },
        {
            "binary_version": "2.37.2-4ubuntu3.5",
            "binary_name": "libfdisk1"
        },
        {
            "binary_version": "2.37.2-4ubuntu3.5",
            "binary_name": "libmount1"
        },
        {
            "binary_version": "2.37.2-4ubuntu3.5",
            "binary_name": "libsmartcols1"
        },
        {
            "binary_version": "2.37.2-4ubuntu3.5",
            "binary_name": "libuuid1"
        },
        {
            "binary_version": "2.37.2-4ubuntu3.5",
            "binary_name": "mount"
        },
        {
            "binary_version": "2.37.2-4ubuntu3.5",
            "binary_name": "rfkill"
        },
        {
            "binary_version": "2.37.2-4ubuntu3.5",
            "binary_name": "util-linux"
        },
        {
            "binary_version": "2.37.2-4ubuntu3.5",
            "binary_name": "util-linux-locales"
        },
        {
            "binary_version": "2.37.2-4ubuntu3.5",
            "binary_name": "uuid-runtime"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8091-1.json"

cves_map

{
    "ecosystem": "Ubuntu:22.04:LTS",
    "cves": []
}

Ubuntu:24.04:LTS / util-linux

Package

Name: util-linux
Purl: pkg:deb/ubuntu/util-linux@2.39.3-9ubuntu6.5?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.39.3-9ubuntu6.5

Affected versions

2.*

2.39.1-4ubuntu2

2.39.2-6ubuntu1

2.39.3-6ubuntu2

2.39.3-9ubuntu2

2.39.3-9ubuntu4

2.39.3-9ubuntu6

2.39.3-9ubuntu6.1

2.39.3-9ubuntu6.2

2.39.3-9ubuntu6.3

2.39.3-9ubuntu6.4

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "2.39.3-9ubuntu6.5",
            "binary_name": "bsdextrautils"
        },
        {
            "binary_version": "1:2.39.3-9ubuntu6.5",
            "binary_name": "bsdutils"
        },
        {
            "binary_version": "2.39.3-9ubuntu6.5",
            "binary_name": "eject"
        },
        {
            "binary_version": "2.39.3-9ubuntu6.5",
            "binary_name": "fdisk"
        },
        {
            "binary_version": "2.39.3-9ubuntu6.5",
            "binary_name": "libblkid1"
        },
        {
            "binary_version": "2.39.3-9ubuntu6.5",
            "binary_name": "libfdisk1"
        },
        {
            "binary_version": "2.39.3-9ubuntu6.5",
            "binary_name": "libmount1"
        },
        {
            "binary_version": "2.39.3-9ubuntu6.5",
            "binary_name": "libsmartcols1"
        },
        {
            "binary_version": "2.39.3-9ubuntu6.5",
            "binary_name": "libuuid1"
        },
        {
            "binary_version": "2.39.3-9ubuntu6.5",
            "binary_name": "mount"
        },
        {
            "binary_version": "2.39.3-9ubuntu6.5",
            "binary_name": "rfkill"
        },
        {
            "binary_version": "2.39.3-9ubuntu6.5",
            "binary_name": "util-linux"
        },
        {
            "binary_version": "2.39.3-9ubuntu6.5",
            "binary_name": "util-linux-extra"
        },
        {
            "binary_version": "2.39.3-9ubuntu6.5",
            "binary_name": "util-linux-locales"
        },
        {
            "binary_version": "2.39.3-9ubuntu6.5",
            "binary_name": "uuid-runtime"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8091-1.json"

cves_map

{
    "ecosystem": "Ubuntu:24.04:LTS",
    "cves": []
}

Ubuntu:25.10 / util-linux

Package

Name: util-linux
Purl: pkg:deb/ubuntu/util-linux@2.41-4ubuntu4.2?arch=source&distro=questing

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.41-4ubuntu4.2

Affected versions

2.*

2.40.2-14ubuntu1

2.41-4ubuntu2

2.41-4ubuntu3

2.41-4ubuntu4

2.41-4ubuntu4.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "2.41-4ubuntu4.2",
            "binary_name": "bsdextrautils"
        },
        {
            "binary_version": "1:2.41-4ubuntu4.2",
            "binary_name": "bsdutils"
        },
        {
            "binary_version": "2.41-4ubuntu4.2",
            "binary_name": "eject"
        },
        {
            "binary_version": "2.41-4ubuntu4.2",
            "binary_name": "fdisk"
        },
        {
            "binary_version": "2.41-4ubuntu4.2",
            "binary_name": "lastlog2"
        },
        {
            "binary_version": "2.41-4ubuntu4.2",
            "binary_name": "libblkid1"
        },
        {
            "binary_version": "2.41-4ubuntu4.2",
            "binary_name": "libfdisk1"
        },
        {
            "binary_version": "2.41-4ubuntu4.2",
            "binary_name": "liblastlog2-2"
        },
        {
            "binary_version": "2.41-4ubuntu4.2",
            "binary_name": "libmount1"
        },
        {
            "binary_version": "2.41-4ubuntu4.2",
            "binary_name": "libpam-lastlog2"
        },
        {
            "binary_version": "2.41-4ubuntu4.2",
            "binary_name": "libsmartcols1"
        },
        {
            "binary_version": "2.41-4ubuntu4.2",
            "binary_name": "libuuid1"
        },
        {
            "binary_version": "1:4.16.0-2+really2.41-4ubuntu4.2",
            "binary_name": "login"
        },
        {
            "binary_version": "2.41-4ubuntu4.2",
            "binary_name": "mount"
        },
        {
            "binary_version": "2.41-4ubuntu4.2",
            "binary_name": "rfkill"
        },
        {
            "binary_version": "2.41-4ubuntu4.2",
            "binary_name": "util-linux"
        },
        {
            "binary_version": "2.41-4ubuntu4.2",
            "binary_name": "util-linux-extra"
        },
        {
            "binary_version": "2.41-4ubuntu4.2",
            "binary_name": "util-linux-locales"
        },
        {
            "binary_version": "2.41-4ubuntu4.2",
            "binary_name": "uuid-runtime"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8091-1.json"

cves_map

{
    "ecosystem": "Ubuntu:25.10",
    "cves": []
}