Skip to content
OpenAdvisories
High ALAS2023-2026-1916 1 CVE

Important: util-linux security update (Amazon Linux 2023)

Published Jul 6, 2026 · Updated Jul 7, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-53615: Integer Overflow or Wraparound in libblkid/src/partitions/dos.c

Fixed packages 26

ReleasePackageFixed in
Amazon Linux · 2023 libblkid 0:2.37.4-1.amzn2023.0.5
Amazon Linux · 2023 libblkid-debuginfo 0:2.37.4-1.amzn2023.0.5
Amazon Linux · 2023 libblkid-devel 0:2.37.4-1.amzn2023.0.5
Amazon Linux · 2023 libfdisk 0:2.37.4-1.amzn2023.0.5
Amazon Linux · 2023 libfdisk-debuginfo 0:2.37.4-1.amzn2023.0.5
Amazon Linux · 2023 libfdisk-devel 0:2.37.4-1.amzn2023.0.5
Amazon Linux · 2023 libmount 0:2.37.4-1.amzn2023.0.5
Amazon Linux · 2023 libmount-debuginfo 0:2.37.4-1.amzn2023.0.5
Amazon Linux · 2023 libmount-devel 0:2.37.4-1.amzn2023.0.5
Amazon Linux · 2023 libsmartcols 0:2.37.4-1.amzn2023.0.5
Amazon Linux · 2023 libsmartcols-debuginfo 0:2.37.4-1.amzn2023.0.5
Amazon Linux · 2023 libsmartcols-devel 0:2.37.4-1.amzn2023.0.5
Amazon Linux · 2023 libuuid 0:2.37.4-1.amzn2023.0.5
Amazon Linux · 2023 libuuid-debuginfo 0:2.37.4-1.amzn2023.0.5
Amazon Linux · 2023 libuuid-devel 0:2.37.4-1.amzn2023.0.5
Amazon Linux · 2023 python3-libmount 0:2.37.4-1.amzn2023.0.5
Amazon Linux · 2023 python3-libmount-debuginfo 0:2.37.4-1.amzn2023.0.5
Amazon Linux · 2023 util-linux 0:2.37.4-1.amzn2023.0.5
Amazon Linux · 2023 util-linux-core 0:2.37.4-1.amzn2023.0.5
Amazon Linux · 2023 util-linux-core-debuginfo 0:2.37.4-1.amzn2023.0.5
Amazon Linux · 2023 util-linux-debuginfo 0:2.37.4-1.amzn2023.0.5
Amazon Linux · 2023 util-linux-debugsource 0:2.37.4-1.amzn2023.0.5
Amazon Linux · 2023 util-linux-user 0:2.37.4-1.amzn2023.0.5
Amazon Linux · 2023 util-linux-user-debuginfo 0:2.37.4-1.amzn2023.0.5
Amazon Linux · 2023 uuidd 0:2.37.4-1.amzn2023.0.5
Amazon Linux · 2023 uuidd-debuginfo 0:2.37.4-1.amzn2023.0.5

Vulnerabilities 1

  • High 8.0
    CVE-2026-53615

    util-linux libblkid DOS extended-partition overflow produces invalid partition metadata

    util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to th…

    util-linux util-linux util-linux util-linux Linux Debian Ubuntu Azure Linux

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-53615.html