umount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and other packages such as…
Priority LOW 32Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.
Summary
umount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and other packages such as loop-aes-utils, allows local users with unmount permissions to gain privileges via the -r (remount) option, which causes the file system to be remounted with just the read-only flag, which effectively clears the nosuid, nodev, and other flags.
Why it matters now
EPSS 0.00426 37th percentileScored 2026-11-07
Fix Fixed Red Hat: 1 advisory
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 25
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:andries_brouwer:util-linux:2.8.1_alpha:*:*:*:*:*:*:* | 2.8.1_alpha | Vulnerable | Andries Brouwer |
| cpe:2.3:a:andries_brouwer:util-linux:2.8_12:*:*:*:*:*:*:* | 2.8_12 | Vulnerable | Andries Brouwer |
| cpe:2.3:a:andries_brouwer:util-linux:2.9i:*:*:*:*:*:*:* | 2.9i | Vulnerable | Andries Brouwer |
| cpe:2.3:a:andries_brouwer:util-linux:2.9w:*:*:*:*:*:*:* | 2.9w | Vulnerable | Andries Brouwer |
| cpe:2.3:a:andries_brouwer:util-linux:2.10f:*:*:*:*:*:*:* | 2.10f | Vulnerable | Andries Brouwer |
| cpe:2.3:a:andries_brouwer:util-linux:2.10m:*:*:*:*:*:*:* | 2.10m | Vulnerable | Andries Brouwer |
| cpe:2.3:a:andries_brouwer:util-linux:2.10p:*:*:*:*:*:*:* | 2.10p | Vulnerable | Andries Brouwer |
| cpe:2.3:a:andries_brouwer:util-linux:2.11f:*:*:*:*:*:*:* | 2.11f | Vulnerable | Andries Brouwer |
| cpe:2.3:a:andries_brouwer:util-linux:2.11n:*:*:*:*:*:*:* | 2.11n | Vulnerable | Andries Brouwer |
| cpe:2.3:a:andries_brouwer:util-linux:2.11q:*:*:*:*:*:*:* | 2.11q | Vulnerable | Andries Brouwer |
- cpe:2.3:a:andries_brouwer:util-linux:2.8.1_alpha:*:*:*:*:*:*:* Versions 2.8.1_alpha Vulnerable ·Andries Brouwer
- cpe:2.3:a:andries_brouwer:util-linux:2.8_12:*:*:*:*:*:*:* Versions 2.8_12 Vulnerable ·Andries Brouwer
- cpe:2.3:a:andries_brouwer:util-linux:2.9i:*:*:*:*:*:*:* Versions 2.9i Vulnerable ·Andries Brouwer
- cpe:2.3:a:andries_brouwer:util-linux:2.9w:*:*:*:*:*:*:* Versions 2.9w Vulnerable ·Andries Brouwer
- cpe:2.3:a:andries_brouwer:util-linux:2.10f:*:*:*:*:*:*:* Versions 2.10f Vulnerable ·Andries Brouwer
- cpe:2.3:a:andries_brouwer:util-linux:2.10m:*:*:*:*:*:*:* Versions 2.10m Vulnerable ·Andries Brouwer
- cpe:2.3:a:andries_brouwer:util-linux:2.10p:*:*:*:*:*:*:* Versions 2.10p Vulnerable ·Andries Brouwer
- cpe:2.3:a:andries_brouwer:util-linux:2.11f:*:*:*:*:*:*:* Versions 2.11f Vulnerable ·Andries Brouwer
- cpe:2.3:a:andries_brouwer:util-linux:2.11n:*:*:*:*:*:*:* Versions 2.11n Vulnerable ·Andries Brouwer
- cpe:2.3:a:andries_brouwer:util-linux:2.11q:*:*:*:*:*:*:* Versions 2.11q Vulnerable ·Andries Brouwer
Show 15 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:andries_brouwer:util-linux:2.11r:*:*:*:*:*:*:* | 2.11r | Vulnerable | Andries Brouwer |
| cpe:2.3:a:andries_brouwer:util-linux:2.11w:*:*:*:*:*:*:* | 2.11w | Vulnerable | Andries Brouwer |
| cpe:2.3:a:andries_brouwer:util-linux:2.11x:*:*:*:*:*:*:* | 2.11x | Vulnerable | Andries Brouwer |
| cpe:2.3:a:andries_brouwer:util-linux:2.11y:*:*:*:*:*:*:* | 2.11y | Vulnerable | Andries Brouwer |
| cpe:2.3:a:andries_brouwer:util-linux:2.11z:*:*:*:*:*:*:* | 2.11z | Vulnerable | Andries Brouwer |
| cpe:2.3:a:andries_brouwer:util-linux:2.12a:*:*:*:*:*:*:* | 2.12a | Vulnerable | Andries Brouwer |
| cpe:2.3:a:andries_brouwer:util-linux:2.12b:*:*:*:*:*:*:* | 2.12b | Vulnerable | Andries Brouwer |
| cpe:2.3:a:andries_brouwer:util-linux:2.12i:*:*:*:*:*:*:* | 2.12i | Vulnerable | Andries Brouwer |
| cpe:2.3:a:andries_brouwer:util-linux:2.12j:*:*:*:*:*:*:* | 2.12j | Vulnerable | Andries Brouwer |
| cpe:2.3:a:andries_brouwer:util-linux:2.12k:*:*:*:*:*:*:* | 2.12k | Vulnerable | Andries Brouwer |
| cpe:2.3:a:andries_brouwer:util-linux:2.12o:*:*:*:*:*:*:* | 2.12o | Vulnerable | Andries Brouwer |
| cpe:2.3:a:andries_brouwer:util-linux:2.12p:*:*:*:*:*:*:* | 2.12p | Vulnerable | Andries Brouwer |
| cpe:2.3:a:andries_brouwer:util-linux:2.12q:*:*:*:*:*:*:* | 2.12q | Vulnerable | Andries Brouwer |
| cpe:2.3:a:andries_brouwer:util-linux:2.13_pre1:*:*:*:*:*:*:* | 2.13_pre1 | Vulnerable | Andries Brouwer |
| cpe:2.3:a:andries_brouwer:util-linux:2.13_pre2:*:*:*:*:*:*:* | 2.13_pre2 | Vulnerable | Andries Brouwer |
- cpe:2.3:a:andries_brouwer:util-linux:2.11r:*:*:*:*:*:*:* Versions 2.11r Vulnerable ·Andries Brouwer
- cpe:2.3:a:andries_brouwer:util-linux:2.11w:*:*:*:*:*:*:* Versions 2.11w Vulnerable ·Andries Brouwer
- cpe:2.3:a:andries_brouwer:util-linux:2.11x:*:*:*:*:*:*:* Versions 2.11x Vulnerable ·Andries Brouwer
- cpe:2.3:a:andries_brouwer:util-linux:2.11y:*:*:*:*:*:*:* Versions 2.11y Vulnerable ·Andries Brouwer
- cpe:2.3:a:andries_brouwer:util-linux:2.11z:*:*:*:*:*:*:* Versions 2.11z Vulnerable ·Andries Brouwer
- cpe:2.3:a:andries_brouwer:util-linux:2.12a:*:*:*:*:*:*:* Versions 2.12a Vulnerable ·Andries Brouwer
- cpe:2.3:a:andries_brouwer:util-linux:2.12b:*:*:*:*:*:*:* Versions 2.12b Vulnerable ·Andries Brouwer
- cpe:2.3:a:andries_brouwer:util-linux:2.12i:*:*:*:*:*:*:* Versions 2.12i Vulnerable ·Andries Brouwer
- cpe:2.3:a:andries_brouwer:util-linux:2.12j:*:*:*:*:*:*:* Versions 2.12j Vulnerable ·Andries Brouwer
- cpe:2.3:a:andries_brouwer:util-linux:2.12k:*:*:*:*:*:*:* Versions 2.12k Vulnerable ·Andries Brouwer
- cpe:2.3:a:andries_brouwer:util-linux:2.12o:*:*:*:*:*:*:* Versions 2.12o Vulnerable ·Andries Brouwer
- cpe:2.3:a:andries_brouwer:util-linux:2.12p:*:*:*:*:*:*:* Versions 2.12p Vulnerable ·Andries Brouwer
- cpe:2.3:a:andries_brouwer:util-linux:2.12q:*:*:*:*:*:*:* Versions 2.12q Vulnerable ·Andries Brouwer
- cpe:2.3:a:andries_brouwer:util-linux:2.13_pre1:*:*:*:*:*:*:* Versions 2.13_pre1 Vulnerable ·Andries Brouwer
- cpe:2.3:a:andries_brouwer:util-linux:2.13_pre2:*:*:*:*:*:*:* Versions 2.13_pre2 Vulnerable ·Andries Brouwer
Remediation
Red Hat 1 advisory
- RHSA-2005:782 Released 2005-10-11 · Red Hat rating Moderateutil-linux and mount security update
- Red Hat Desktop version 3 losetup-2.11y-31.11, losetup-2.11y-31.11.i386, mount-2.11y-31.11 +3
- Red Hat Enterprise Linux AS version 3 losetup-2.11y-31.11, losetup-2.11y-31.11.i386, losetup-2.11y-31.11.ia64 +9
- Red Hat Enterprise Linux AS version 4 util-linux-2.12a-16.EL4.12, util-linux-2.12a-16.EL4.12.i386, util-linux-2.12a-16.EL4.12.ia64 +1
- Red Hat Enterprise Linux Desktop version 4 util-linux-2.12a-16.EL4.12, util-linux-2.12a-16.EL4.12.i386
- Red Hat Enterprise Linux ES version 3 losetup-2.11y-31.11, losetup-2.11y-31.11.i386, losetup-2.11y-31.11.ia64 +6
- Red Hat Enterprise Linux ES version 4 util-linux-2.12a-16.EL4.12, util-linux-2.12a-16.EL4.12.i386, util-linux-2.12a-16.EL4.12.ia64
- Red Hat Enterprise Linux WS version 3 losetup-2.11y-31.11, losetup-2.11y-31.11.i386, losetup-2.11y-31.11.ia64 +6
- Red Hat Enterprise Linux WS version 4 util-linux-2.12a-16.EL4.12, util-linux-2.12a-16.EL4.12.i386, util-linux-2.12a-16.EL4.12.ia64
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Desktop version 3 | Fixed | RHSA-2005:782 |
| Red Hat Enterprise Linux AS version 3 | Fixed | RHSA-2005:782 |
| Red Hat Enterprise Linux AS version 4 | Fixed | RHSA-2005:782 |
| Red Hat Enterprise Linux Desktop version 4 | Fixed | RHSA-2005:782 |
| Red Hat Enterprise Linux ES version 3 | Fixed | RHSA-2005:782 |
| Red Hat Enterprise Linux ES version 4 | Fixed | RHSA-2005:782 |
| Red Hat Enterprise Linux WS version 3 | Fixed | RHSA-2005:782 |
| Red Hat Enterprise Linux WS version 4 | Fixed | RHSA-2005:782 |
Timeline
- 2026-10-02 Threatist record created from CVE-2005-2876
- 2026-10-03 Alias added: GHSA-96fj-vjjr-c856
References
More Andries Brouwer Util-linux vulnerabilities
- TI-2001-01128 vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in… CVSS 2.0HIGH 7.2
- TI-2001-01101 The PAM implementation in /bin/login of the util-linux package before 2.11 causes a… CVSS 2.0HIGH 7.2
- TI-2004-00067 The login program in util-linux 2.11 and earlier uses a pointer after it has been freed… CVSS 2.0MEDIUM 5.0
- TI-2003-00089 A patch for mcookie in the util-linux package for Mandrake Linux 8.2 and 9.0 uses… CVSS 2.0MEDIUM 5.0
- TI-2006-06849 login in util-linux-2.12a skips pam_acct_mgmt and chauth_tok when authentication is… CVSS 2.0MEDIUM 4.1
Sources
- CVE-2005-2876 · CVE Program
- CVE-2005-2876 · NVD
- FIRST EPSS
- GHSA-96fj-vjjr-c856 · GitHub Advisory Database · CC BY 4.0
- CVE-2005-2876 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences