A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows a local user on a vulnerable system to unmount other users' filesystems that are either world-writable themselves (like /tmp) or mounted in a world-writable directory. An attacker may use this flaw to cause a denial of service to applications that use the affected filesystems.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade util-linux | Aug 22, 2024 | Aug 23, 2022 |
| Amazon_linux_2023 | — | Upgrade util-linuxUpgrade util-linux-coreUpgrade uuiddUpgrade libmount-debuginfoUpgrade util-linux-debugsourceUpgrade libuuid-develUpgrade uuidd-debuginfoUpgrade util-linux-userUpgrade libblkid-develUpgrade libmountUpgrade libblkid-debuginfoUpgrade libsmartcolsUpgrade libmount-develUpgrade python3-libmount-debuginfoUpgrade libuuidUpgrade util-linux-core-debuginfoUpgrade libsmartcols-develUpgrade util-linux-user-debuginfoUpgrade python3-libmountUpgrade libblkidUpgrade libsmartcols-debuginfoUpgrade libuuid-debuginfoUpgrade libfdisk-debuginfoUpgrade libfdisk-develUpgrade libfdiskUpgrade util-linux-debuginfo | Feb 17, 2025 | Jan 24, 2022 |
| Debian | — | Upgrade util-linux | Nov 4, 2022 | Aug 23, 2022 |
| Gentoo Linux | — | Upgrade sys-apps/util-linux. | Jan 8, 2024 | Aug 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libblkidUpgrade libfdiskUpgrade libsmartcolsUpgrade libuuidUpgrade util-linux-userUpgrade libmountUpgrade util-linux | May 9, 2022 | Apr 18, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade util-linuxUpgrade libuuidUpgrade libfdiskUpgrade util-linux-userUpgrade libmountUpgrade libsmartcolsUpgrade libblkid | Apr 19, 2022 | Apr 18, 2022 |
| Suse | — | Upgrade libmount1Upgrade util-linux-langUpgrade libfdisk1-32bitUpgrade util-linux-systemdUpgrade libmount-develUpgrade libblkid-develUpgrade libeconf-develUpgrade libeconf0-32bitUpgrade login_defsUpgrade libfdisk1Upgrade libfdisk-develUpgrade libfdisk-devel-32bitUpgrade libsmartcols-develUpgrade libmount1-32bitUpgrade libuuid1-32bitUpgrade libuuid1Upgrade libuuid-devel-staticUpgrade python3-libmountUpgrade shadowUpgrade libuuid-develUpgrade libsmartcols-devel-32bitUpgrade libmount-devel-staticUpgrade libsmartcols1Upgrade libfdisk-devel-staticUpgrade util-linuxUpgrade libsmartcols1-32bitUpgrade libuuid-devel-32bitUpgrade libsmartcols-devel-staticUpgrade libeconf0Upgrade libblkid-devel-32bitUpgrade uuiddUpgrade libblkid1Upgrade libblkid-devel-staticUpgrade libmount-devel-32bitUpgrade libblkid1-32bit | Mar 5, 2022 | Feb 9, 2022 |
| Ubuntu | — | Upgrade util-linuxUpgrade mount | Mar 22, 2023 | Aug 23, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub