A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows an unprivileged local attacker to unmount FUSE filesystems that belong to certain other users who have a UID that is a prefix of the UID of the attacker in its string form. An attacker may use this flaw to cause a denial of service to applications that use the affected filesystems.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade util-linux | Aug 22, 2024 | Aug 23, 2022 |
| Amazon_linux_2023 | — | Upgrade util-linux-debugsourceUpgrade util-linux-user-debuginfoUpgrade libfdisk-develUpgrade util-linux-core-debuginfoUpgrade libuuid-develUpgrade util-linux-userUpgrade libuuidUpgrade libblkid-debuginfoUpgrade python3-libmount-debuginfoUpgrade util-linux-coreUpgrade libuuid-debuginfoUpgrade uuidd-debuginfoUpgrade python3-libmountUpgrade uuiddUpgrade util-linuxUpgrade libsmartcols-debuginfoUpgrade libblkid-develUpgrade libsmartcols-develUpgrade libmountUpgrade libfdisk-debuginfoUpgrade libblkidUpgrade util-linux-debuginfoUpgrade libfdiskUpgrade libmount-debuginfoUpgrade libmount-develUpgrade libsmartcols | Feb 17, 2025 | Jan 24, 2022 |
| Debian | — | Upgrade util-linux | Nov 4, 2022 | Aug 23, 2022 |
| Gentoo Linux | — | Upgrade sys-apps/util-linux. | Jan 8, 2024 | Aug 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade util-linuxUpgrade libfdiskUpgrade util-linux-userUpgrade libuuidUpgrade libblkidUpgrade libmountUpgrade libsmartcols | May 9, 2022 | Apr 18, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libblkidUpgrade libuuidUpgrade libmountUpgrade libfdiskUpgrade util-linux-userUpgrade libsmartcolsUpgrade util-linux | Apr 19, 2022 | Apr 18, 2022 |
| Suse | — | Upgrade libmount1Upgrade libsmartcols1Upgrade libmount-devel-32bitUpgrade libblkid-devel-staticUpgrade libuuid-devel-32bitUpgrade libblkid-devel-32bitUpgrade shadowUpgrade util-linux-langUpgrade libuuid1Upgrade libblkid1Upgrade libfdisk1Upgrade libuuid-develUpgrade libeconf0Upgrade libblkid-develUpgrade libsmartcols1-32bitUpgrade libfdisk-devel-staticUpgrade libuuid-devel-staticUpgrade libmount1-32bitUpgrade libsmartcols-devel-32bitUpgrade libblkid1-32bitUpgrade libfdisk-develUpgrade libfdisk1-32bitUpgrade uuiddUpgrade libeconf-develUpgrade libeconf0-32bitUpgrade libsmartcols-develUpgrade libuuid1-32bitUpgrade login_defsUpgrade util-linuxUpgrade libmount-develUpgrade python3-libmountUpgrade libsmartcols-devel-staticUpgrade util-linux-systemdUpgrade libfdisk-devel-32bitUpgrade libmount-devel-static | Mar 5, 2022 | Feb 9, 2022 |
| Ubuntu | — | Upgrade util-linuxUpgrade mount | Mar 22, 2023 | Aug 23, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub