Summary
The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these include the fdisk configuration tool and the login program.
Security Fix(es):
* util-linux: util-linux: heap use-after-free in libblkid nested partition probing (CVE-2026-13595)
* util-linux: TOCTOU in the mount program via ancestor directory swap on target path (CVE-2026-53613)
* util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser (CVE-2026-53615)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | libblkid | 2.32.1-50.el8_10 |
| AlmaLinux · 8 | libblkid-devel | 2.32.1-50.el8_10 |
| AlmaLinux · 8 | libfdisk | 2.32.1-50.el8_10 |
| AlmaLinux · 8 | libfdisk-devel | 2.32.1-50.el8_10 |
| AlmaLinux · 8 | libmount | 2.32.1-50.el8_10 |
| AlmaLinux · 8 | libmount-devel | 2.32.1-50.el8_10 |
| AlmaLinux · 8 | libsmartcols | 2.32.1-50.el8_10 |
| AlmaLinux · 8 | libsmartcols-devel | 2.32.1-50.el8_10 |
| AlmaLinux · 8 | libuuid | 2.32.1-50.el8_10 |
| AlmaLinux · 8 | libuuid-devel | 2.32.1-50.el8_10 |
| AlmaLinux · 8 | python3-libmount | 2.32.1-50.el8_10 |
| AlmaLinux · 8 | util-linux | 2.32.1-50.el8_10 |
| AlmaLinux · 8 | util-linux-user | 2.32.1-50.el8_10 |
| AlmaLinux · 8 | uuidd | 2.32.1-50.el8_10 |
Vulnerabilities 3
-
High 8.0
util-linux libblkid DOS extended-partition overflow produces invalid partition metadata
util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to th…
-
High 7.0CVE-2026-53613 Public exploit
util-linux mount target TOCTOU allows local privilege escalation
util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before…
-
Medium 6.8
Util-linux: util-linux: heap use-after-free in libblkid nested partition probing
A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a parent partition entry in a dynamically allocated array. When subsequent partition ad…
References
-
report
https://access.redhat.com/security/cve/CVE-2026-13595
-
report
https://access.redhat.com/security/cve/CVE-2026-53613
-
report
https://access.redhat.com/security/cve/CVE-2026-53615
-
report
https://bugzilla.redhat.com/2494101
-
report
https://bugzilla.redhat.com/2519646
-
report
https://bugzilla.redhat.com/2552551
-
advisory
https://errata.almalinux.org/8/ALSA-2026-96212.html