A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows a local user on a vulnerable system to unmount other users' filesystems that are either world-writable themselves (like /tmp) or mounted in a world-writable directory. An attacker may use this flaw to cause a denial of service to applications that use the affected filesystems.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade util-linux | Aug 22, 2024 | Aug 23, 2022 |
| Amazon_linux_2023 | — | Upgrade libmount-develUpgrade libfdiskUpgrade python3-libmountUpgrade python3-libmount-debuginfoUpgrade libblkidUpgrade libuuid-debuginfoUpgrade util-linux-debuginfoUpgrade util-linux-user-debuginfoUpgrade libblkid-debuginfoUpgrade libsmartcolsUpgrade libfdisk-debuginfoUpgrade libfdisk-develUpgrade libblkid-develUpgrade libsmartcols-debuginfoUpgrade libuuidUpgrade util-linux-core-debuginfoUpgrade libsmartcols-develUpgrade libmountUpgrade util-linux-coreUpgrade uuidd-debuginfoUpgrade util-linux-debugsourceUpgrade util-linuxUpgrade libuuid-develUpgrade uuiddUpgrade util-linux-userUpgrade libmount-debuginfo | Feb 17, 2025 | Jan 24, 2022 |
| Debian | — | Upgrade util-linux | Nov 4, 2022 | Aug 23, 2022 |
| Gentoo Linux | — | Upgrade sys-apps/util-linux. | Jan 8, 2024 | Aug 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libblkidUpgrade libfdiskUpgrade util-linuxUpgrade util-linux-userUpgrade libmountUpgrade libuuidUpgrade libsmartcols | May 9, 2022 | Apr 18, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libsmartcolsUpgrade util-linux-userUpgrade libblkidUpgrade libmountUpgrade util-linuxUpgrade libuuidUpgrade libfdisk | Apr 19, 2022 | Apr 18, 2022 |
| Suse | — | Upgrade util-linux-langUpgrade libfdisk1-32bitUpgrade libmount1Upgrade libfdisk-devel-32bitUpgrade libfdisk-develUpgrade libblkid-develUpgrade libuuid1Upgrade login_defsUpgrade libmount-develUpgrade util-linux-systemdUpgrade libeconf-develUpgrade python3-libmountUpgrade libuuid-devel-staticUpgrade libmount1-32bitUpgrade libsmartcols-develUpgrade libeconf0-32bitUpgrade libuuid1-32bitUpgrade libfdisk1Upgrade libsmartcols-devel-staticUpgrade libeconf0Upgrade libuuid-devel-32bitUpgrade libuuid-develUpgrade libsmartcols-devel-32bitUpgrade libblkid1-32bitUpgrade libmount-devel-32bitUpgrade shadowUpgrade uuiddUpgrade util-linuxUpgrade libblkid1Upgrade libblkid-devel-staticUpgrade libfdisk-devel-staticUpgrade libsmartcols1Upgrade libsmartcols1-32bitUpgrade libmount-devel-staticUpgrade libblkid-devel-32bit | Mar 5, 2022 | Feb 9, 2022 |
| Ubuntu | — | Upgrade util-linuxUpgrade mount | Mar 22, 2023 | Aug 23, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub