SUID Mount Utility Vulnerability in Util-Linux Affects Linux Systems
CVE-2026-53612
7HIGH
What is CVE-2026-53612?
Util-Linux, a suite of essential Linux utilities, has a vulnerability in its SUID mount utility that could potentially allow a low-privileged user to gain root privileges. This occurs when the hook_owner.c post-mount hook executes chmod() and lchown() operations on mount targets that have been validated previously. A local user who has been granted permissions via an /etc/fstab entry can exploit this flaw by using the renameat2(RENAME_EXCHANGE) function. This can lead to a redirection of ownership or mode changes to a privileged path, thereby compromising system integrity. The vulnerability has been addressed in later versions 2.41.5 and 2.42.2.
Affected Version(s)
util-linux >= 2.39, < 2.41.5 < 2.39, 2.41.5
util-linux >= 2.42, < 2.42.2 < 2.42, 2.42.2