RHSA-2026:96212 — Red Hat Security Advisory: util-linux security update

Fixed packages 44

Release	Package	Fixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream	libblkid-debuginfo	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream	libfdisk-debuginfo	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream	libmount-debuginfo	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream	libsmartcols-debuginfo	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream	libuuid-debuginfo	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream	python3-libmount	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream	python3-libmount-debuginfo	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream	util-linux-debuginfo	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream	util-linux-debugsource	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream	util-linux-user-debuginfo	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream	uuidd-debuginfo	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos	libblkid	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos	libblkid-debuginfo	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos	libblkid-devel	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos	libfdisk	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos	libfdisk-debuginfo	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos	libfdisk-devel	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos	libmount	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos	libmount-debuginfo	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos	libsmartcols	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos	libsmartcols-debuginfo	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos	libsmartcols-devel	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos	libuuid	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos	libuuid-debuginfo	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos	libuuid-devel	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos	python3-libmount-debuginfo	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos	util-linux	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos	util-linux-debuginfo	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos	util-linux-debugsource	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos	util-linux-user	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos	util-linux-user-debuginfo	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos	uuidd	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos	uuidd-debuginfo	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb	libblkid-debuginfo	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb	libfdisk-debuginfo	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb	libmount-debuginfo	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb	libmount-devel	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb	libsmartcols-debuginfo	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb	libuuid-debuginfo	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb	python3-libmount-debuginfo	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb	util-linux-debuginfo	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb	util-linux-debugsource	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb	util-linux-user-debuginfo	0:2.32.1-50.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb	uuidd-debuginfo	0:2.32.1-50.el8_10

Vulnerabilities 3

High 8.0

CVE-2026-53615

util-linux libblkid DOS extended-partition overflow produces invalid partition metadata

util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to th…

util-linux util-linux util-linux util-linux Linux Debian Ubuntu Azure Linux

Oct 14, 2026
High 7.0

CVE-2026-53613 Public exploit

util-linux mount target TOCTOU allows local privilege escalation

util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before…

util-linux util-linux util-linux util-linux Linux Debian Ubuntu Azure Linux Alpine

Oct 14, 2026
Medium 6.8

CVE-2026-13595

Util-linux: util-linux: heap use-after-free in libblkid nested partition probing

A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a parent partition entry in a dynamically allocated array. When subsequent partition ad…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux

Jun 29, 2026

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=2494101
report
https://bugzilla.redhat.com/show_bug.cgi?id=2519646
report
https://bugzilla.redhat.com/show_bug.cgi?id=2552551
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_96212.json
report
https://access.redhat.com/security/cve/CVE-2026-13595
advisory
https://www.cve.org/CVERecord?id=CVE-2026-13595
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-13595
article
https://github.com/util-linux/util-linux/commit/c0186f14fbdb02f64c8e0ba701ce727ea764ff4c
report
https://access.redhat.com/security/cve/CVE-2026-53613
advisory
https://www.cve.org/CVERecord?id=CVE-2026-53613
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-53613
article
https://github.com/util-linux/util-linux/security/advisories/GHSA-8gj5-72r3-428g
report
https://access.redhat.com/security/cve/CVE-2026-53615
advisory
https://www.cve.org/CVERecord?id=CVE-2026-53615
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-53615
article
https://github.com/util-linux/util-linux/commit/05c2dbadf34cc74192287f377904afaaf4061623
article
https://github.com/util-linux/util-linux/commit/a2d858176b609ab5b8535021a3af9cd302d23d31
article
https://github.com/util-linux/util-linux/commit/e9d544d013267ea86b70ee8ff78abd280e6641af
article
https://github.com/util-linux/util-linux/releases/tag/v2.41.4
article
https://github.com/util-linux/util-linux/security/advisories/GHSA-h4rw-gv36-wmp5

Red Hat Security Advisory: util-linux security update

Fixed packages 44

Vulnerabilities 3

util-linux libblkid DOS extended-partition overflow produces invalid partition metadata

util-linux mount target TOCTOU allows local privilege escalation

Util-linux: util-linux: heap use-after-free in libblkid nested partition probing

References