(a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by (1) using the --guess-fstype command-line option or (2) attempting to mount a non-existent device, which generates different error messages depending on whether the directory exists.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade util-linux | Aug 30, 2017 | Jan 21, 2014 |
| Centos_linux | — | Upgrade util-linux-ngUpgrade uuiddUpgrade libblkid-develUpgrade libuuid-develUpgrade libuuidUpgrade libblkid | Dec 1, 2016 | Jan 21, 2014 |
| Debian | — | Upgrade util-linux | Jul 30, 2024 | Jan 21, 2014 |
| Gentoo Linux | — | Upgrade sys-apps/util-linux. | Oct 30, 2017 | Jan 21, 2014 |
| Oracle_linux | — | Upgrade libblkidUpgrade libuuid-develUpgrade util-linux-ngUpgrade libblkid-develUpgrade libuuidUpgrade uuidd | Oct 16, 2024 | Jan 21, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 5, 2013 |
| Suse | — | Upgrade python-libmountUpgrade libblkid1-32bitUpgrade libuuid-develUpgrade libblkid1Upgrade util-linuxUpgrade libsmartcols1Upgrade uuiddUpgrade libfdisk1Upgrade util-linux-langUpgrade libmount1-32bitUpgrade libuuid-devel-staticUpgrade libmount1Upgrade util-linux-systemdUpgrade libsmartcols-develUpgrade libuuid1Upgrade libblkid-devel-staticUpgrade libfdisk-develUpgrade libblkid-develUpgrade libmount-develUpgrade libuuid1-32bit | Aug 9, 2024 | Jan 21, 2014 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jan 21, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub