(a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by (1) using the --guess-fstype command-line option or (2) attempting to mount a non-existent device, which generates different error messages depending on whether the directory exists.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade util-linux | Aug 30, 2017 | Jan 21, 2014 |
| Centos_linux | — | Upgrade libblkidUpgrade uuiddUpgrade util-linux-ngUpgrade libblkid-develUpgrade libuuidUpgrade libuuid-devel | Dec 1, 2016 | Jan 21, 2014 |
| Debian | — | Upgrade util-linux | Jul 30, 2024 | Jan 21, 2014 |
| Gentoo Linux | — | Upgrade sys-apps/util-linux. | Oct 30, 2017 | Jan 21, 2014 |
| Oracle_linux | — | Upgrade uuiddUpgrade libuuidUpgrade util-linux-ngUpgrade libuuid-develUpgrade libblkid-develUpgrade libblkid | Oct 16, 2024 | Jan 21, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 5, 2013 |
| Suse | — | Upgrade libblkid1Upgrade libsmartcols1Upgrade uuiddUpgrade libblkid1-32bitUpgrade python-libmountUpgrade libuuid-develUpgrade util-linuxUpgrade libfdisk1Upgrade util-linux-langUpgrade libfdisk-develUpgrade libblkid-devel-staticUpgrade libmount-develUpgrade libuuid1Upgrade libblkid-develUpgrade libuuid1-32bitUpgrade util-linux-systemdUpgrade libuuid-devel-staticUpgrade libmount1-32bitUpgrade libmount1Upgrade libsmartcols-devel | Aug 9, 2024 | Jan 21, 2014 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jan 21, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub