Skip to content
OpenAdvisories
High ALAS2-2026-3789 1 CVE

Important: util-linux security update (Amazon Linux 2)

Published Jul 6, 2026 · Updated Jul 7, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-53615: Integer Overflow or Wraparound in libblkid/src/partitions/dos.c

Fixed packages 15

ReleasePackageFixed in
Amazon Linux · 2 libblkid 0:2.30.2-2.amzn2.0.14
Amazon Linux · 2 libblkid-devel 0:2.30.2-2.amzn2.0.14
Amazon Linux · 2 libfdisk 0:2.30.2-2.amzn2.0.14
Amazon Linux · 2 libfdisk-devel 0:2.30.2-2.amzn2.0.14
Amazon Linux · 2 libmount 0:2.30.2-2.amzn2.0.14
Amazon Linux · 2 libmount-devel 0:2.30.2-2.amzn2.0.14
Amazon Linux · 2 libsmartcols 0:2.30.2-2.amzn2.0.14
Amazon Linux · 2 libsmartcols-devel 0:2.30.2-2.amzn2.0.14
Amazon Linux · 2 libuuid 0:2.30.2-2.amzn2.0.14
Amazon Linux · 2 libuuid-devel 0:2.30.2-2.amzn2.0.14
Amazon Linux · 2 python-libmount 0:2.30.2-2.amzn2.0.14
Amazon Linux · 2 util-linux 0:2.30.2-2.amzn2.0.14
Amazon Linux · 2 util-linux-debuginfo 0:2.30.2-2.amzn2.0.14
Amazon Linux · 2 util-linux-user 0:2.30.2-2.amzn2.0.14
Amazon Linux · 2 uuidd 0:2.30.2-2.amzn2.0.14

Vulnerabilities 1

  • High 8.0
    CVE-2026-53615

    util-linux libblkid DOS extended-partition overflow produces invalid partition metadata

    util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to th…

    util-linux util-linux util-linux util-linux Linux Debian Ubuntu Azure Linux

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-53615.html