Local Privilege Escalation in Util-linux by The Vendor

CVE-2026-53613

What is CVE-2026-53613?

A local low-privileged user, authorized via an fstab entry, can exploit a flaw in util-linux by leveraging pathname validation issues when performing restricted non-root mount requests. This can allow an attacker to redirect legitimate mount operations to a location they control, effectively enabling them to mount malicious content over critical system files, such as /etc/sudoers.d, thereby elevating their privileges to root level. This vulnerability affects versions of util-linux from 2.17 up to 2.42.4 under specific conditions, primarily when utilizing the legacy mount(2) path without the /proc filesystem.

References