Summary
[2.32.1-50.0.1]
- Orabug 38983542 - libblkid: use checksum for jmicron
- Orabug 35995159 - report lost loop device
[2.32.1-50]
- fix RHEL-283368 - libblkid: validate EBR data [CVE-2026-53615]
[2.32.1-49]
- fix RHEL-215636 - libblkid: use-after-free in nested partition probing [CVE-2026-13595]
- fix RHEL-244823 - mount: TOCTOU via ancestor directory swap on target path [CVE-2026-53613]
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | libblkid | 0:2.32.1-50.0.1.el8_10 |
| Oracle Linux · 8 | libblkid-devel | 0:2.32.1-50.0.1.el8_10 |
| Oracle Linux · 8 | libfdisk | 0:2.32.1-50.0.1.el8_10 |
| Oracle Linux · 8 | libfdisk-devel | 0:2.32.1-50.0.1.el8_10 |
| Oracle Linux · 8 | libmount | 0:2.32.1-50.0.1.el8_10 |
| Oracle Linux · 8 | libmount-devel | 0:2.32.1-50.0.1.el8_10 |
| Oracle Linux · 8 | libsmartcols | 0:2.32.1-50.0.1.el8_10 |
| Oracle Linux · 8 | libsmartcols-devel | 0:2.32.1-50.0.1.el8_10 |
| Oracle Linux · 8 | libuuid | 0:2.32.1-50.0.1.el8_10 |
| Oracle Linux · 8 | libuuid-devel | 0:2.32.1-50.0.1.el8_10 |
| Oracle Linux · 8 | python3-libmount | 0:2.32.1-50.0.1.el8_10 |
| Oracle Linux · 8 | util-linux | 0:2.32.1-50.0.1.el8_10 |
| Oracle Linux · 8 | util-linux-user | 0:2.32.1-50.0.1.el8_10 |
| Oracle Linux · 8 | uuidd | 0:2.32.1-50.0.1.el8_10 |
Vulnerabilities 3
-
High 8.0
util-linux libblkid DOS extended-partition overflow produces invalid partition metadata
util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to th…
-
High 7.0CVE-2026-53613 Public exploit
util-linux mount target TOCTOU allows local privilege escalation
util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before…
-
Medium 6.8
Util-linux: util-linux: heap use-after-free in libblkid nested partition probing
A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a parent partition entry in a dynamically allocated array. When subsequent partition ad…