util-linux vulnerabilities

24 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Latest util-linux vulnerabilities

CVE-2026-53615 — util-linux libblkid DOS extended-partition overflow produces invalid partition metadata (CVSS 8.0)
CVE-2026-53614 — util-linux LIBMOUNT_FORCE_MOUNT2 allows nosuid and noexec bypass (CVSS 7.0)
CVE-2026-53613 — util-linux mount target TOCTOU allows local privilege escalation (CVSS 7.0)
CVE-2026-53612 — util-linux mount hook_owner TOCTOU allows local privilege escalation (CVSS 7.0)
CVE-2026-76642 — util-linux libmount Privilege Escalation via Failed Mount Helper (CVSS 7.8)
CVE-2026-13595 — Util-linux: util-linux: heap use-after-free in libblkid nested partition probing (CVSS 5.3)
CVE-2026-27456 — util-linux: TOCTOU Race Condition in util-linux mount(8) - Loop Device Setup (CVSS 4.7)
CVE-2026-3184 — Util-linux: util-linux: access control bypass due to improper hostname canonicalization (CVSS 5.3)
CVE-2025-14104 — Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames (CVSS 6.1)
CVE-2024-28085 — (CVSS 3.3)
CVE-2020-21583 — (CVSS 6.7)
CVE-2021-3996 — (CVSS 5.5)
CVE-2021-3995 — (CVSS 5.5)
CVE-2022-0563 — (CVSS 5.5)
CVE-2021-37600 — (CVSS 5.5)
CVE-2018-7738 — (CVSS 7.8)
CVE-2015-5224 — (CVSS 9.8)
CVE-2016-5011 — (CVSS 4.6)
CVE-2014-9114 — (CVSS 7.8)
CVE-2016-2779 — (CVSS 7.8)
CVE-2015-5218 — (CVSS 2.1)
CVE-2013-0157 — (CVSS 2.1)
CVE-2007-5191 — (CVSS 7.2)
CVE-2001-1494 — (CVSS 5.5)