Known vulnerabilities in Util-linux

Vendor: kernel.org
Software: Util-linux
Software CPE: cpe:2.3:a:kernel_org:util-linux:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 21
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Util-linux Util-linux is affected by 21 known vulnerabilities: 3 high, 3 medium, 15 low Critical High Medium Low

Vulnerabilities (21)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146723 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-78410
CWE-367 Low
No
No
2.41.6, 2.42.3 02.09.2026 SB2026090246
#VU146722 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-78409
CWE-59 Low
No
No
2.41.6, 2.42.3 02.09.2026 SB2026090246
#VU146721 - Detection of error condition without action
CVE-2026-76642
CWE-390 Low
No
No
2.41.6, 2.42.3 02.09.2026 SB2026090246
#VU146720 - Privilege Context Switching Error
CVE-2026-78408
CWE-270 High
No
No
2.41.6, 2.42.3 02.09.2026 SB2026090246
#VU146719 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CWE-74 Low
No
No
2.41.6, 2.42.3 02.09.2026 SB2026090246
#VU146718 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-53612
CWE-367 Low
No
No
2.41.5, 2.42.2 02.09.2026 SB2026090239
SB2026090240
SB2026090247
#VU146717 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-53613
CWE-367 Low
No
No
2.41.5, 2.42.2 02.09.2026 SB2026090239
SB2026090240
SB2026090247
#VU146716 - Reliance on Untrusted Inputs in a Security Decision
CVE-2026-53614
CWE-807 Low
No
No
2.41.5, 2.42.2 02.09.2026 SB2026090239
SB2026090240
SB2026090247
#VU146715 - Integer overflow
CVE-2026-53615
CWE-190 Low
No
No
2.41.4 02.09.2026 SB2026040169
#VU124785 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-27456
CWE-362 Low
No
No
2.41.4 01.04.2026 SB2026040169
SB2026040201
SB2026040202
and 8 more
#VU119955 - Heap-based Buffer Overflow
CVE-2025-14104
CWE-122 Low
No
No
- 15.12.2025 SB2025121510
SB2025121939
SB2026011282
and 14 more
#VU87906 - Improper input validation
CVE-2024-28085
CWE-20 Low
Available
No
- 28.03.2024 SB2024032835
SB2024032836
SB2024032901
and 22 more
#VU60005 - Permissions, Privileges, and Access Controls
CVE-2021-3996
CWE-264 Low
No
No
2.37.3 25.01.2022 SB2022012524
SB2022012528
SB2022020938
and 4 more
#VU60004 - Permissions, Privileges, and Access Controls
CVE-2021-3995
CWE-264 Low
No
No
2.37.3 25.01.2022 SB2022012524
SB2022012528
SB2022020938
and 4 more
#VU55451 - Integer overflow
CVE-2021-37600
CWE-190 High
No
No
- 30.07.2021 SB2021073009
SB2021101949
SB2021102015
and 11 more
#VU10957 - Permissions, Privileges, and Access Controls
CVE-2018-7738
CWE-264 Low
No
No
- 13.03.2018 SB2018021330
SB2018031102
SB2018030713
and 13 more
#VU38432 - Permissions, Privileges, and Access Controls
CVE-2015-5224
CWE-264 High
No
No
- 23.08.2017 SB2017082321
#VU39729 - Permissions, Privileges, and Access Controls
CVE-2016-2779
CWE-264 Low
No
No
- 07.02.2017 SB2017020704
#VU45138 - Resource Management Errors
CVE-2011-1675
CWE-399 Medium
No
No
- 10.04.2011 SB2011041002
SB2014051805
SB2024041561
and 3 more
#VU45139 - Permissions, Privileges, and Access Controls
CVE-2011-1676
CWE-264 Medium
No
No
- 10.04.2011 SB2011041002
SB2014051805
SB2024041561
and 3 more


Showing elements 1 - 20 out of 21