A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows a local user on a vulnerable system to unmount other users' filesystems that are either world-writable themselves (like /tmp) or mounted in a world-writable directory. An attacker may use this flaw to cause a denial of service to applications that use the affected filesystems.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade util-linux | Aug 22, 2024 | Aug 23, 2022 |
| Amazon_linux_2023 | — | Upgrade util-linux-userUpgrade util-linuxUpgrade libuuid-develUpgrade uuidd-debuginfoUpgrade libmount-debuginfoUpgrade uuiddUpgrade util-linux-debugsourceUpgrade util-linux-coreUpgrade libmount-develUpgrade util-linux-debuginfoUpgrade libfdisk-develUpgrade libfdisk-debuginfoUpgrade libfdiskUpgrade libuuid-debuginfoUpgrade util-linux-user-debuginfoUpgrade python3-libmountUpgrade libblkidUpgrade libsmartcols-develUpgrade util-linux-core-debuginfoUpgrade python3-libmount-debuginfoUpgrade libsmartcols-debuginfoUpgrade libsmartcolsUpgrade libmountUpgrade libblkid-develUpgrade libuuidUpgrade libblkid-debuginfo | Feb 17, 2025 | Jan 24, 2022 |
| Debian | — | Upgrade util-linux | Nov 4, 2022 | Aug 23, 2022 |
| Gentoo Linux | — | Upgrade sys-apps/util-linux. | Jan 8, 2024 | Aug 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libsmartcolsUpgrade libuuidUpgrade util-linuxUpgrade libmountUpgrade util-linux-userUpgrade libfdiskUpgrade libblkid | May 9, 2022 | Apr 18, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libuuidUpgrade util-linuxUpgrade libfdiskUpgrade libblkidUpgrade libsmartcolsUpgrade util-linux-userUpgrade libmount | Apr 19, 2022 | Apr 18, 2022 |
| Suse | — | Upgrade libfdisk-devel-staticUpgrade libuuid-develUpgrade libsmartcols1Upgrade libblkid1-32bitUpgrade libblkid1Upgrade libblkid-devel-staticUpgrade libmount-devel-32bitUpgrade shadowUpgrade libuuid-devel-32bitUpgrade libsmartcols-devel-staticUpgrade util-linuxUpgrade libsmartcols1-32bitUpgrade libblkid-devel-32bitUpgrade libmount-devel-staticUpgrade libsmartcols-devel-32bitUpgrade libeconf0Upgrade uuiddUpgrade libfdisk-devel-32bitUpgrade libuuid1Upgrade util-linux-systemdUpgrade libfdisk1-32bitUpgrade util-linux-langUpgrade libmount1Upgrade libmount1-32bitUpgrade libeconf0-32bitUpgrade login_defsUpgrade libblkid-develUpgrade libmount-develUpgrade libsmartcols-develUpgrade libeconf-develUpgrade libuuid-devel-staticUpgrade libfdisk-develUpgrade libfdisk1Upgrade python3-libmountUpgrade libuuid1-32bit | Mar 5, 2022 | Feb 9, 2022 |
| Ubuntu | — | Upgrade mountUpgrade util-linux | Mar 22, 2023 | Aug 23, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub