A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows an unprivileged local attacker to unmount FUSE filesystems that belong to certain other users who have a UID that is a prefix of the UID of the attacker in its string form. An attacker may use this flaw to cause a denial of service to applications that use the affected filesystems.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade util-linux | Aug 22, 2024 | Aug 23, 2022 |
| Amazon_linux_2023 | — | Upgrade libsmartcols-develUpgrade libmount-debuginfoUpgrade libfdiskUpgrade libfdisk-debuginfoUpgrade libmountUpgrade libmount-develUpgrade libsmartcolsUpgrade util-linux-debuginfoUpgrade libblkidUpgrade libblkid-develUpgrade python3-libmountUpgrade libuuid-debuginfoUpgrade libsmartcols-debuginfoUpgrade uuidd-debuginfoUpgrade util-linux-debugsourceUpgrade uuiddUpgrade util-linuxUpgrade util-linux-user-debuginfoUpgrade libblkid-debuginfoUpgrade util-linux-coreUpgrade util-linux-userUpgrade libuuid-develUpgrade libuuidUpgrade python3-libmount-debuginfoUpgrade util-linux-core-debuginfoUpgrade libfdisk-devel | Feb 17, 2025 | Jan 24, 2022 |
| Debian | — | Upgrade util-linux | Nov 4, 2022 | Aug 23, 2022 |
| Gentoo Linux | — | Upgrade sys-apps/util-linux. | Jan 8, 2024 | Aug 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade util-linuxUpgrade util-linux-userUpgrade libfdiskUpgrade libsmartcolsUpgrade libblkidUpgrade libmountUpgrade libuuid | May 9, 2022 | Apr 18, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libblkidUpgrade libuuidUpgrade libsmartcolsUpgrade util-linux-userUpgrade libmountUpgrade util-linuxUpgrade libfdisk | Apr 19, 2022 | Apr 18, 2022 |
| Suse | — | Upgrade libeconf0-32bitUpgrade libmount-devel-staticUpgrade libsmartcols-devel-staticUpgrade python3-libmountUpgrade libmount-develUpgrade libfdisk1-32bitUpgrade libblkid1-32bitUpgrade util-linuxUpgrade libfdisk-devel-32bitUpgrade libeconf-develUpgrade libsmartcols-develUpgrade libfdisk-develUpgrade libsmartcols-devel-32bitUpgrade libuuid1-32bitUpgrade util-linux-systemdUpgrade login_defsUpgrade uuiddUpgrade libmount1-32bitUpgrade libblkid-develUpgrade util-linux-langUpgrade libuuid1Upgrade libfdisk-devel-staticUpgrade libmount1Upgrade libuuid-devel-32bitUpgrade libblkid-devel-staticUpgrade libblkid-devel-32bitUpgrade libuuid-develUpgrade shadowUpgrade libblkid1Upgrade libmount-devel-32bitUpgrade libfdisk1Upgrade libsmartcols1Upgrade libuuid-devel-staticUpgrade libeconf0Upgrade libsmartcols1-32bit | Mar 5, 2022 | Feb 9, 2022 |
| Ubuntu | — | Upgrade util-linuxUpgrade mount | Mar 22, 2023 | Aug 23, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub