A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows a local user on a vulnerable system to unmount other users' filesystems that are either world-writable themselves (like /tmp) or mounted in a world-writable directory. An attacker may use this flaw to cause a denial of service to applications that use the affected filesystems.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade util-linux | Aug 22, 2024 | Aug 23, 2022 |
| Amazon_linux_2023 | — | Upgrade util-linux-coreUpgrade util-linux-debugsourceUpgrade libuuid-develUpgrade util-linuxUpgrade uuiddUpgrade uuidd-debuginfoUpgrade libmount-debuginfoUpgrade util-linux-userUpgrade util-linux-core-debuginfoUpgrade libuuid-debuginfoUpgrade libsmartcolsUpgrade libsmartcols-develUpgrade util-linux-user-debuginfoUpgrade libblkidUpgrade python3-libmountUpgrade util-linux-debuginfoUpgrade libfdisk-debuginfoUpgrade libfdiskUpgrade libfdisk-develUpgrade python3-libmount-debuginfoUpgrade libuuidUpgrade libsmartcols-debuginfoUpgrade libmountUpgrade libblkid-debuginfoUpgrade libmount-develUpgrade libblkid-devel | Feb 17, 2025 | Jan 24, 2022 |
| Debian | — | Upgrade util-linux | Nov 4, 2022 | Aug 23, 2022 |
| Gentoo Linux | — | Upgrade sys-apps/util-linux. | Jan 8, 2024 | Aug 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libblkidUpgrade libfdiskUpgrade libuuidUpgrade util-linux-userUpgrade util-linuxUpgrade libsmartcolsUpgrade libmount | May 9, 2022 | Apr 18, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libuuidUpgrade libfdiskUpgrade util-linuxUpgrade libsmartcolsUpgrade libmountUpgrade util-linux-userUpgrade libblkid | Apr 19, 2022 | Apr 18, 2022 |
| Suse | — | Upgrade libblkid-devel-32bitUpgrade util-linuxUpgrade libsmartcols-devel-staticUpgrade libmount-devel-staticUpgrade uuiddUpgrade libsmartcols1Upgrade libblkid1-32bitUpgrade libfdisk-devel-staticUpgrade libsmartcols-devel-32bitUpgrade libmount-devel-32bitUpgrade libuuid-develUpgrade libsmartcols1-32bitUpgrade libblkid1Upgrade libblkid-devel-staticUpgrade shadowUpgrade libuuid-devel-32bitUpgrade libeconf0Upgrade libuuid1Upgrade login_defsUpgrade libuuid-devel-staticUpgrade libfdisk-develUpgrade libfdisk1Upgrade libsmartcols-develUpgrade util-linux-langUpgrade libfdisk1-32bitUpgrade python3-libmountUpgrade libmount1Upgrade libuuid1-32bitUpgrade libmount1-32bitUpgrade libblkid-develUpgrade libeconf0-32bitUpgrade libeconf-develUpgrade libmount-develUpgrade libfdisk-devel-32bitUpgrade util-linux-systemd | Mar 5, 2022 | Feb 9, 2022 |
| Ubuntu | — | Upgrade util-linuxUpgrade mount | Mar 22, 2023 | Aug 23, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub