Priority HIGH 72
util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems.
RHSA-2026:63162
Red Hat Hardened Images RPMs Security Update
Released 2026-09-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images libblkid-2.42.2-3.4.hum1@aarch64, libblkid-2.42.2-3.4.hum1@x86_64, libblkid-devel-2.42.2-3.4.hum1@aarch64 +34
Fixes 4 records
TI-2026-54523 CVE-2026-78410
Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection
Priority HIGH 69
A flaw was found in util-linux.
TI-2026-54521 CVE-2026-78408
Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority
Priority HIGH 68
The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve().
TI-2026-54522 CVE-2026-78409
Util-linux: util-linux: x-mount.subdir detached-tree resolution can escape via intermediate symlinks
Priority HIGH 66
The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW.