A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows a local user on a vulnerable system to unmount other users' filesystems that are either world-writable themselves (like /tmp) or mounted in a world-writable directory. An attacker may use this flaw to cause a denial of service to applications that use the affected filesystems.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade util-linux | Aug 22, 2024 | Aug 23, 2022 |
| Amazon_linux_2023 | — | Upgrade libsmartcols-debuginfoUpgrade libmountUpgrade libblkid-develUpgrade libuuidUpgrade libsmartcolsUpgrade util-linux-core-debuginfoUpgrade python3-libmount-debuginfoUpgrade libblkid-debuginfoUpgrade libmount-develUpgrade libsmartcols-develUpgrade libblkidUpgrade python3-libmountUpgrade util-linux-user-debuginfoUpgrade util-linux-debuginfoUpgrade libfdisk-debuginfoUpgrade libfdisk-develUpgrade libfdiskUpgrade libuuid-debuginfoUpgrade libmount-debuginfoUpgrade uuidd-debuginfoUpgrade util-linuxUpgrade libuuid-develUpgrade util-linux-userUpgrade uuiddUpgrade util-linux-debugsourceUpgrade util-linux-core | Feb 17, 2025 | Jan 24, 2022 |
| Debian | — | Upgrade util-linux | Nov 4, 2022 | Aug 23, 2022 |
| Gentoo Linux | — | Upgrade sys-apps/util-linux. | Jan 8, 2024 | Aug 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libblkidUpgrade libfdiskUpgrade util-linux-userUpgrade libmountUpgrade util-linuxUpgrade libuuidUpgrade libsmartcols | May 9, 2022 | Apr 18, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libblkidUpgrade libmountUpgrade util-linux-userUpgrade libsmartcolsUpgrade libfdiskUpgrade libuuidUpgrade util-linux | Apr 19, 2022 | Apr 18, 2022 |
| Suse | — | Upgrade libmount-devel-32bitUpgrade libeconf0Upgrade libsmartcols-devel-staticUpgrade libuuid-devel-32bitUpgrade uuiddUpgrade libblkid-devel-32bitUpgrade shadowUpgrade libfdisk-devel-staticUpgrade libblkid1Upgrade libblkid-devel-staticUpgrade libsmartcols1Upgrade libsmartcols1-32bitUpgrade libuuid-develUpgrade util-linuxUpgrade libsmartcols-devel-32bitUpgrade libmount-devel-staticUpgrade libblkid1-32bitUpgrade libblkid-develUpgrade libfdisk-devel-32bitUpgrade libfdisk1Upgrade libeconf0-32bitUpgrade util-linux-systemdUpgrade libmount-develUpgrade libmount1-32bitUpgrade util-linux-langUpgrade libuuid1-32bitUpgrade libuuid1Upgrade libeconf-develUpgrade libsmartcols-develUpgrade login_defsUpgrade libmount1Upgrade libfdisk1-32bitUpgrade libfdisk-develUpgrade python3-libmountUpgrade libuuid-devel-static | Mar 5, 2022 | Feb 9, 2022 |
| Ubuntu | — | Upgrade util-linuxUpgrade mount | Mar 22, 2023 | Aug 23, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub