Description
A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a parent partition entry in a dynamically allocated array. When subsequent partition additions cause the array to be reallocated, this pointer becomes stale, leading to a heap use-after-free read. An attacker who can present a crafted block device image (for example, via USB insertion or a loop-mounted disk image) can trigger this flaw without user interaction, as libblkid is invoked automatically by udev/udisks as root on block-device hot-plug events. This could lead to limited information disclosure or denial of service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | — | — |
| Red Hat | Red Hat Enterprise Linux 8 | — | — |
| Red Hat | Red Hat Enterprise Linux 9 | — | — |
| Red Hat | Red Hat Enterprise Linux 9.8 Extended Update Support | — | — |
| Red Hat | Red Hat Cost Management On-Premise 1 | — | — |
| Red Hat | Red Hat Hardened Images | — | — |
| Red Hat | Red Hat Enterprise Linux 7 | — | — |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — |
| Red Hat | Red Hat OpenShift Container Platform 5 | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | util-linux | 2.42.2-1 | — |
| Debian 13 | util-linux | 2.41.5-0+deb13u1 | — |
| Debian 12 | util-linux | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | util-linux | No fix yet | — |
| Ubuntu 26.04 LTS | util-linux | 2.41.3-3ubuntu2.2 | USN-8702-1 |
| Ubuntu 25.10 | util-linux | No fix yet | — |
| Ubuntu 24.04 LTS | util-linux | 2.39.3-9ubuntu6.6 | USN-8702-1 |
| Ubuntu 22.04 LTS | util-linux | 2.37.2-4ubuntu3.6 | USN-8702-1 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | util-linux | No fix yet | — |
| Ubuntu 14.04 LTS | util-linux | No fix yet | — |
| Ubuntu Pro 20.04 LTS | util-linux | No fix yet | — |
| Ubuntu Pro 16.04 LTS | util-linux | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Hardened Images 1 | uuidd +17 | 2.42.2-1.hum1 | RHSA-2026:26573 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | uuidd +13 | 2.40.2-18.el10_2.20 | ALSA-2026:93461 |
| AlmaLinux 8 | uuidd +13 | 2.32.1-50.el8_10 | ALSA-2026:96212 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | util-linux | 2.40.2-18.el10_2.20 | RLSA-2026:93461 |
| Rocky Linux 9 | uuidd +14 | 2.37.4-28.el9_9 | RLSA-2026:97522 |
| Rocky Linux 8 | util-linux | 2.32.1-50.el8_10 | RLSA-2026:96212 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | util-linux +1 | 2.40.4-150700.4.18.1 | SUSE-SU-2026:3684-1 |
| SLES 15 SP6 | util-linux +1 | 2.39.3-150600.4.26.1 | SUSE-SU-2026:3685-1 |
| SLES 15 SP5 | util-linux +1 | 2.37.4-150500.9.32.1 | SUSE-SU-2026:3813-1 |
| SLES 15 SP4 | util-linux +1 | 2.37.2-150400.8.50.1 | SUSE-SU-2026:3812-1 |
| SLES 12 SP5 | util-linux +2 | 2.33.2-4.57.1 | SUSE-SU-2026:4296-1 |
Show 13 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | util-linux +2 | 2.41.1-160000.5.1 | SUSE-SU-2026:23870-1, SUSE-SU-2026:23861-1 |
| SLES for SAP 15 SP6 | util-linux +1 | 2.39.3-150600.4.26.1 | SUSE-SU-2026:3685-1 |
| SLES for SAP 15 SP5 | util-linux +1 | 2.37.4-150500.9.32.1 | SUSE-SU-2026:3813-1 |
| SLES for SAP 15 SP4 | util-linux +1 | 2.37.2-150400.8.50.1 | SUSE-SU-2026:3812-1 |
| SLES 16.0 | util-linux +2 | 2.41.1-160000.5.1 | SUSE-SU-2026:23870-1, SUSE-SU-2026:23861-1 |
| SLE Micro 6.2 | util-linux +1 | 2.41.1-160000.5.1 | SUSE-SU-2026:23884-1 |
| SLE Micro 6.1 | util-linux +1 | 2.40.4-slfo.1.1_7.1 | SUSE-SU-2026:23255-1 |
| SLE Micro 6.0 | util-linux +1 | 2.39.3-8.1 | SUSE-SU-2026:23250-1 |
| SLE Micro 5.5 | util-linux +1 | 2.37.4-150500.9.32.1 | SUSE-SU-2026:3813-1 |
| SLE Micro 5.4 | util-linux +1 | 2.37.2-150400.8.50.1 | SUSE-SU-2026:3812-1 |
| SLE Micro 5.3 | util-linux +1 | 2.37.2-150400.8.50.1 | SUSE-SU-2026:3812-1 |
| SLE HPC 15 SP5 | util-linux +1 | 2.37.4-150500.9.32.1 | SUSE-SU-2026:3813-1 |
| SLE HPC 15 SP4 | util-linux +1 | 2.37.2-150400.8.50.1 | SUSE-SU-2026:3812-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | util-linux | 2.42.2-1.1 | openSUSE-SU-2026:11408-1 |
| openSUSE Leap 16.0 | util-linux +2 | 2.41.1-160000.5.1 | openSUSE-SU-2026:21905-1 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | util-linux | 2.40.2-5 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | uuidd +13 | 2.40.2-18.0.1.el10_2.20 | ELSA-2026-93461 |
| Oracle Linux 8 | uuidd +13 | 2.32.1-50.0.1.el8_10 | ELSA-2026-96212 |
Advisories 22
- RLSA-2026:97522 Important: util-linux security, bug fix, and enhancement update Rocky Linux Security Advisories · Nov 13, 2026
- WID-SEC-2026-2121 util-linux: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen BSI CERT-Bund (WID) · Nov 12, 2026
- RLSA-2026:96212 Important: util-linux security update Rocky Linux Security Advisories · Nov 10, 2026
- ALSA-2026:96212 Important: util-linux security update AlmaLinux Security Advisories · Nov 9, 2026
- ELSA-2026-96212 Important: util-linux security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 9, 2026
- RLSA-2026:93461 Important: util-linux security update Rocky Linux Security Advisories · Nov 3, 2026
- ALSA-2026:93461 Important: util-linux security update AlmaLinux Security Advisories · Nov 2, 2026
- ELSA-2026-93461 Important: util-linux security update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Nov 2, 2026
- USN-8702-1 util-linux vulnerabilities Ubuntu Security Notices (USN) · Oct 17, 2026
- RHSA-2026:26573 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 6, 2026
- SUSE-SU-2026:23884-1 Security update for util-linux SUSE / openSUSE Security Updates · Sep 30, 2026
- SUSE-SU-2026:23870-1 Security update for util-linux SUSE / openSUSE Security Updates · Sep 27, 2026
- SUSE-SU-2026:23861-1 Security update for util-linux SUSE / openSUSE Security Updates · Sep 27, 2026
- openSUSE-SU-2026:21905-1 Security update for util-linux SUSE / openSUSE Security Updates · Sep 25, 2026
- SUSE-SU-2026:4296-1 Security update for util-linux SUSE / openSUSE Security Updates · Sep 23, 2026
- SUSE-SU-2026:3812-1 Security update for util-linux SUSE / openSUSE Security Updates · Aug 31, 2026
- SUSE-SU-2026:3813-1 Security update for util-linux SUSE / openSUSE Security Updates · Aug 31, 2026
- SUSE-SU-2026:23255-1 Security update for util-linux SUSE / openSUSE Security Updates · Aug 31, 2026
- SUSE-SU-2026:23250-1 Security update for util-linux SUSE / openSUSE Security Updates · Aug 27, 2026
- SUSE-SU-2026:3684-1 Security update for util-linux SUSE / openSUSE Security Updates · Aug 26, 2026
- SUSE-SU-2026:3685-1 Security update for util-linux SUSE / openSUSE Security Updates · Aug 26, 2026
- openSUSE-SU-2026:11408-1 libblkid-devel-2.42.2-1.1 on GA media SUSE / openSUSE Security Updates · Jul 30, 2026
References
- RHSA-2026:26573 vendor-advisory
- RHSA-2026:93461 vendor-advisory
- RHSA-2026:95365 vendor-advisory
- RHSA-2026:96212 vendor-advisory
- RHSA-2026:97522 vendor-advisory
- RHSA-2026:99119 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2026-13595 vdb-entry
- RHBZ#2494101 issue-tracking
- https://github.com/util-linux/util-linux/commit/c0186f14fbdb02f64c8e0ba701ce727ea764ff4c