Local Privilege Escalation in util-linux by an Attacker via SUID mount
CVE-2026-53614
7HIGH
What is CVE-2026-53614?
A vulnerability in the util-linux package allows local low-privileged users to exploit the SUID 'mount' utility. By manipulating the 'LIBMOUNT_FORCE_MOUNT2' environment variable, an attacker can force a non-atomic legacy bind-mount path, thereby racing the security flags application during a bind mount operation. If the initial bind is authorized with options like 'nosuid', 'noexec', or 'nodev', there exists a critical window where an attacker might execute a SUID program from the temporarily unprotected mount, potentially gaining elevated privileges. Users are advised to update to versions 2.41.5 or 2.42.2 to mitigate this vulnerability.
Affected Version(s)
util-linux >= 2.39.1, < 2.41.5 < 2.39.1, 2.41.5
util-linux >= 2.42, < 2.42.2 < 2.42, 2.42.2