A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows an unprivileged local attacker to unmount FUSE filesystems that belong to certain other users who have a UID that is a prefix of the UID of the attacker in its string form. An attacker may use this flaw to cause a denial of service to applications that use the affected filesystems.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade util-linux | Aug 22, 2024 | Aug 23, 2022 |
| Amazon_linux_2023 | — | Upgrade libuuidUpgrade util-linuxUpgrade util-linux-debugsourceUpgrade util-linux-coreUpgrade uuiddUpgrade util-linux-userUpgrade libblkid-debuginfoUpgrade util-linux-user-debuginfoUpgrade libuuid-develUpgrade uuidd-debuginfoUpgrade libsmartcols-debuginfoUpgrade libfdisk-develUpgrade libuuid-debuginfoUpgrade python3-libmountUpgrade util-linux-core-debuginfoUpgrade python3-libmount-debuginfoUpgrade libsmartcolsUpgrade libmountUpgrade util-linux-debuginfoUpgrade libblkidUpgrade libmount-debuginfoUpgrade libfdiskUpgrade libsmartcols-develUpgrade libfdisk-debuginfoUpgrade libmount-develUpgrade libblkid-devel | Feb 17, 2025 | Jan 24, 2022 |
| Debian | — | Upgrade util-linux | Nov 4, 2022 | Aug 23, 2022 |
| Gentoo Linux | — | Upgrade sys-apps/util-linux. | Jan 8, 2024 | Aug 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libsmartcolsUpgrade libblkidUpgrade libuuidUpgrade libmountUpgrade util-linuxUpgrade util-linux-userUpgrade libfdisk | May 9, 2022 | Apr 18, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade util-linuxUpgrade libmountUpgrade libfdiskUpgrade libsmartcolsUpgrade util-linux-userUpgrade libuuidUpgrade libblkid | Apr 19, 2022 | Apr 18, 2022 |
| Suse | — | Upgrade util-linuxUpgrade libmount-develUpgrade libsmartcols-devel-staticUpgrade python3-libmountUpgrade libeconf-develUpgrade uuiddUpgrade libfdisk1-32bitUpgrade libmount-devel-staticUpgrade login_defsUpgrade libmount1-32bitUpgrade libeconf0-32bitUpgrade libblkid1-32bitUpgrade libfdisk-devel-32bitUpgrade libsmartcols-devel-32bitUpgrade util-linux-systemdUpgrade libuuid1-32bitUpgrade libfdisk-develUpgrade libsmartcols-develUpgrade libsmartcols1Upgrade libblkid1Upgrade libblkid-develUpgrade libmount1Upgrade libblkid-devel-32bitUpgrade libblkid-devel-staticUpgrade libfdisk-devel-staticUpgrade libsmartcols1-32bitUpgrade libuuid-develUpgrade libuuid1Upgrade libeconf0Upgrade libfdisk1Upgrade libuuid-devel-staticUpgrade libuuid-devel-32bitUpgrade util-linux-langUpgrade libmount-devel-32bitUpgrade shadow | Mar 5, 2022 | Feb 9, 2022 |
| Ubuntu | — | Upgrade mountUpgrade util-linux | Mar 22, 2023 | Aug 23, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub