A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows an unprivileged local attacker to unmount FUSE filesystems that belong to certain other users who have a UID that is a prefix of the UID of the attacker in its string form. An attacker may use this flaw to cause a denial of service to applications that use the affected filesystems.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-util-linux | Aug 22, 2024 | Aug 23, 2022 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-libblkidamazon-linux-2023-upgrade-libblkid-debuginfoamazon-linux-2023-upgrade-libblkid-develamazon-linux-2023-upgrade-libfdiskamazon-linux-2023-upgrade-libfdisk-debuginfoamazon-linux-2023-upgrade-libfdisk-develamazon-linux-2023-upgrade-libmountamazon-linux-2023-upgrade-libmount-debuginfoamazon-linux-2023-upgrade-libmount-develamazon-linux-2023-upgrade-libsmartcolsamazon-linux-2023-upgrade-libsmartcols-debuginfoamazon-linux-2023-upgrade-libsmartcols-develamazon-linux-2023-upgrade-libuuidamazon-linux-2023-upgrade-libuuid-debuginfoamazon-linux-2023-upgrade-libuuid-develamazon-linux-2023-upgrade-python3-libmountamazon-linux-2023-upgrade-python3-libmount-debuginfoamazon-linux-2023-upgrade-util-linuxamazon-linux-2023-upgrade-util-linux-coreamazon-linux-2023-upgrade-util-linux-core-debuginfoamazon-linux-2023-upgrade-util-linux-debuginfoamazon-linux-2023-upgrade-util-linux-debugsourceamazon-linux-2023-upgrade-util-linux-useramazon-linux-2023-upgrade-util-linux-user-debuginfoamazon-linux-2023-upgrade-uuiddamazon-linux-2023-upgrade-uuidd-debuginfo | Feb 17, 2025 | Jan 24, 2022 | |
| Debian | debian-upgrade-util-linux | Nov 4, 2022 | Aug 23, 2022 | |
| Gentoo Linux | gentoo-linux-upgrade-sys-apps-util-linux | Jan 8, 2024 | Aug 23, 2022 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-libblkidhuawei-euleros-2_0_sp10-upgrade-libfdiskhuawei-euleros-2_0_sp10-upgrade-libmounthuawei-euleros-2_0_sp10-upgrade-libsmartcolshuawei-euleros-2_0_sp10-upgrade-libuuidhuawei-euleros-2_0_sp10-upgrade-util-linuxhuawei-euleros-2_0_sp10-upgrade-util-linux-user | May 9, 2022 | Apr 18, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-libblkidhuawei-euleros-2_0_sp9-upgrade-libfdiskhuawei-euleros-2_0_sp9-upgrade-libmounthuawei-euleros-2_0_sp9-upgrade-libsmartcolshuawei-euleros-2_0_sp9-upgrade-libuuidhuawei-euleros-2_0_sp9-upgrade-util-linuxhuawei-euleros-2_0_sp9-upgrade-util-linux-user | Apr 19, 2022 | Apr 18, 2022 | |
| Suse | — | suse-upgrade-libblkid-develsuse-upgrade-libblkid-devel-32bitsuse-upgrade-libblkid-devel-staticsuse-upgrade-libblkid1suse-upgrade-libblkid1-32bitsuse-upgrade-libeconf-develsuse-upgrade-libeconf0suse-upgrade-libeconf0-32bitsuse-upgrade-libfdisk-develsuse-upgrade-libfdisk-devel-32bitsuse-upgrade-libfdisk-devel-staticsuse-upgrade-libfdisk1suse-upgrade-libfdisk1-32bitsuse-upgrade-libmount-develsuse-upgrade-libmount-devel-32bitsuse-upgrade-libmount-devel-staticsuse-upgrade-libmount1suse-upgrade-libmount1-32bitsuse-upgrade-libsmartcols-develsuse-upgrade-libsmartcols-devel-32bitsuse-upgrade-libsmartcols-devel-staticsuse-upgrade-libsmartcols1suse-upgrade-libsmartcols1-32bitsuse-upgrade-libuuid-develsuse-upgrade-libuuid-devel-32bitsuse-upgrade-libuuid-devel-staticsuse-upgrade-libuuid1suse-upgrade-libuuid1-32bitsuse-upgrade-login_defssuse-upgrade-python3-libmountsuse-upgrade-shadowsuse-upgrade-util-linuxsuse-upgrade-util-linux-langsuse-upgrade-util-linux-systemdsuse-upgrade-uuidd | Mar 5, 2022 | Feb 9, 2022 |
| Ubuntu | ubuntu-upgrade-mountubuntu-upgrade-util-linux | Mar 22, 2023 | Aug 23, 2022 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Aug 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub