Mount Utility Vulnerability in BusyBox Products
CVE-2026-88838

5.5MEDIUM

Key Information:

Vendor

Red Hat
Status
Red Hat Hardened Images
Vendor
CVE Published:
13 October 2026

What is CVE-2026-88838?

A vulnerability has been identified in the BusyBox mount utility that allows non-root users to bypass security restrictions defined in the /etc/fstab file. By utilizing specific clearing-mask options on the command line, non-root users can override intended security measures that were meant to prevent the use of the nosuid, nodev, and noexec flags. This flaw undermines the administrator's configuration, leading to potential security breaches and unauthorized access to system resources.

References

https://access.redhat.com/security/cve/CVE-2026-88838
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2531352
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Red Hat would like to thank Shubham Raj (Causal Security) for reporting this issue.
.