Skip to content
OpenAdvisories

Vendor

util-linux

7 known vulnerabilities.

Products

util-linux 7
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.7
    CVE-2026-27456

    util-linux: TOCTOU Race Condition in util-linux mount(8) - Loop Device Setup

    util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU (Time-of-Check-Time-of-Use) vulnerability has been identified in the SUID binary /usr/bin/mount from util-linux. The mount binary, when setting up loop devices, validates …

    util-linux util-linux util-linux util-linux Linux Debian Ubuntu Alpine
  • Medium 6.1
    CVE-2025-14104

    Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames

    A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.

    Red Hat util-linux Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Alpine