Local Privilege Escalation Vulnerability in Util-Linux Affecting Red Hat

CVE-2026-78410

What is CVE-2026-78410?

A local privilege escalation issue exists in util-linux that allows a local unprivileged user to exploit improper handling of restricted bind mounts. The source path is taken from the fstab file but is not properly secured prior to executing a privileged mount. This vulnerability permits an attacker with access to modify a writable ancestor directory to redirect SUID mount operations to bind a directory from an unauthorized host. If the fstab entry includes settings for X-mount.owner, X-mount.group, or X-mount.mode, this can lead to unauthorized changes in ownership or mode of the redirected inode, resulting in potential security breaches.

References