fuse 2.8.5 and earlier does not properly handle when /etc/mtab cannot be updated, which allows local users to unmount arbitrary directories via a symlink attack.
CVSS Details
- CVSS 3.1 Base Score: 3.6
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade fuse | Jul 30, 2024 | Sep 2, 2011 |
| Oracle_linux | — | Upgrade fuse-develUpgrade fuseUpgrade fuse-libs | Oct 16, 2024 | Sep 2, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 2, 2010 |
| Suse | — | Upgrade libulockmgr1Upgrade fuse-devel-staticUpgrade fuse-develUpgrade libfuse2Upgrade fuseUpgrade fuse-doc | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade fuse-utils | Nov 8, 2024 | Sep 2, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub