Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
AlmaLinux util-linux tools may allow privilege escalation
published 3 days ago
Summary
The util-linux utilities used by AlmaLinux, such as disk management and login programs, contain several coding errors that could let a malicious user gain higher system rights or tamper with mount operations. This could lead to unauthorized access or manipulation of files and system settings. Apply the latest package updates for the listed AlmaLinux components as soon as possible.
What to do
- Update almalinux libblkid to version 2.40.2-18.el10_2.20.
- Update almalinux libblkid-devel to version 2.40.2-18.el10_2.20.
- Update almalinux libfdisk to version 2.40.2-18.el10_2.20.
- Update almalinux libfdisk-devel to version 2.40.2-18.el10_2.20.
- Update almalinux libmount to version 2.40.2-18.el10_2.20.
- Update almalinux libmount-devel to version 2.40.2-18.el10_2.20.
- Update almalinux libsmartcols to version 2.40.2-18.el10_2.20.
- Update almalinux libsmartcols-devel to version 2.40.2-18.el10_2.20.
- Update almalinux libuuid to version 2.40.2-18.el10_2.20.
- Update almalinux libuuid-devel to version 2.40.2-18.el10_2.20.
- Update almalinux python3-libmount to version 2.40.2-18.el10_2.20.
- Update almalinux util-linux to version 2.40.2-18.el10_2.20.
- Update almalinux util-linux-core to version 2.40.2-18.el10_2.20.
- Update almalinux uuidd to version 2.40.2-18.el10_2.20.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| AlmaLinux:10 | almalinux | libblkid |
< 2.40.2-18.el10_2.20 Fix: upgrade to 2.40.2-18.el10_2.20
|
| AlmaLinux:10 | almalinux | libblkid-devel |
< 2.40.2-18.el10_2.20 Fix: upgrade to 2.40.2-18.el10_2.20
|
| AlmaLinux:10 | almalinux | libfdisk |
< 2.40.2-18.el10_2.20 Fix: upgrade to 2.40.2-18.el10_2.20
|
| AlmaLinux:10 | almalinux | libfdisk-devel |
< 2.40.2-18.el10_2.20 Fix: upgrade to 2.40.2-18.el10_2.20
|
| AlmaLinux:10 | almalinux | libmount |
< 2.40.2-18.el10_2.20 Fix: upgrade to 2.40.2-18.el10_2.20
|
| AlmaLinux:10 | almalinux | libmount-devel |
< 2.40.2-18.el10_2.20 Fix: upgrade to 2.40.2-18.el10_2.20
|
| AlmaLinux:10 | almalinux | libsmartcols |
< 2.40.2-18.el10_2.20 Fix: upgrade to 2.40.2-18.el10_2.20
|
| AlmaLinux:10 | almalinux | libsmartcols-devel |
< 2.40.2-18.el10_2.20 Fix: upgrade to 2.40.2-18.el10_2.20
|
| AlmaLinux:10 | almalinux | libuuid |
< 2.40.2-18.el10_2.20 Fix: upgrade to 2.40.2-18.el10_2.20
|
| AlmaLinux:10 | almalinux | libuuid-devel |
< 2.40.2-18.el10_2.20 Fix: upgrade to 2.40.2-18.el10_2.20
|
| AlmaLinux:10 | almalinux | python3-libmount |
< 2.40.2-18.el10_2.20 Fix: upgrade to 2.40.2-18.el10_2.20
|
| AlmaLinux:10 | almalinux | util-linux |
< 2.40.2-18.el10_2.20 Fix: upgrade to 2.40.2-18.el10_2.20
|
| AlmaLinux:10 | almalinux | util-linux-core |
< 2.40.2-18.el10_2.20 Fix: upgrade to 2.40.2-18.el10_2.20
|
| AlmaLinux:10 | almalinux | uuidd |
< 2.40.2-18.el10_2.20 Fix: upgrade to 2.40.2-18.el10_2.20
|
Original advisory text
Important: util-linux security update
The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these include the fdisk configuration tool and the login program.
Security Fix(es):
* util-linux: TOCTOU in the mount program when setting up loop devices (CVE-2026-27456)
* util-linux: util-linux: heap use-after-free in libblkid nested partition probing (CVE-2026-13595)
* util-linux: TOCTOU in the mount program via ancestor directory swap on target path (CVE-2026-53613)
* util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes (CVE-2026-53612)
* util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2 (CVE-2026-53614)
* util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks (CVE-2026-76642)
* util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority (CVE-2026-78408)
* util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection (CVE-2026-78410)
* util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser (CVE-2026-53615)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Security Fix(es):
* util-linux: TOCTOU in the mount program when setting up loop devices (CVE-2026-27456)
* util-linux: util-linux: heap use-after-free in libblkid nested partition probing (CVE-2026-13595)
* util-linux: TOCTOU in the mount program via ancestor directory swap on target path (CVE-2026-53613)
* util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes (CVE-2026-53612)
* util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2 (CVE-2026-53614)
* util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks (CVE-2026-76642)
* util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority (CVE-2026-78408)
* util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection (CVE-2026-78410)
* util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser (CVE-2026-53615)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
- https://access.redhat.com/errata/RHSA-2026:93461 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-13595 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-27456 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-53612 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-53613 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-53614 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-53615 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-76642 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-78408 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-78410 Third Party Advisory
- https://bugzilla.redhat.com/2454956 Third Party Advisory
- https://bugzilla.redhat.com/2494101 Third Party Advisory
- https://bugzilla.redhat.com/2519646 Third Party Advisory
- https://bugzilla.redhat.com/2519647 Third Party Advisory
- https://bugzilla.redhat.com/2519648 Third Party Advisory
- https://bugzilla.redhat.com/2521999 Third Party Advisory
- https://bugzilla.redhat.com/2522497 Third Party Advisory
- https://bugzilla.redhat.com/2522684 Third Party Advisory
- https://bugzilla.redhat.com/2552551 Third Party Advisory
- https://errata.almalinux.org/10/ALSA-2026-93461.html Vendor Advisory
Timeline
Published2 Nov 2026
Updated2 Nov 2026
First seen2 Nov 2026
Sources
ALSA-2026:93461 · OSV
Track software like this
Free during beta