Race condition in Util-linux - CVE-2026-27456

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU124785

Race condition in Util-linux - CVE-2026-27456

Published: April 1, 2026


Vulnerability identifier: #VU124785
CSH Severity: Low
CVSS v4: 8.2 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N]
CVE-ID: CVE-2026-27456
CWE-ID: CWE-362
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to a race condition in the SUID binary /usr/bin/mount from util-linux. A local user can mount any root-owned file or block device that contains a valid filesystem, gaining full read access to its contents.

The mounted filesystem has MS_SECURE flags applied (nosuid, nodev, noexec), which prevents execution of SUID binaries but does not restrict reading data.


Affected software

Util-linux
SUSE Linux Enterprise Server 12 SP5 LTSS Extended
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Micro for Rancher
SUSE Linux Enterprise Micro
SUSE Linux Micro
Server Applications Module
Basesystem Module
openSUSE Leap
openEuler
Anolis OS
Fedora
libmount1-32bit
libblkid1-debuginfo
libblkid1
libsmartcols-devel
python-libmount
util-linux-debugsource
libuuid1-debuginfo-32bit
util-linux-lang
util-linux-systemd-debuginfo
uuidd
libuuid1
util-linux-systemd
python-libmount-debuginfo
libsmartcols1
libsmartcols1-debuginfo
libfdisk1
libblkid-devel
libmount1
util-linux-debuginfo
libmount-devel
uuidd-debuginfo
libmount1-debuginfo
util-linux-systemd-debugsource
util-linux
libfdisk1-debuginfo
libblkid1-32bit
libuuid-devel
libmount1-debuginfo-32bit
python-libmount-debugsource
libuuid1-32bit
libuuid1-debuginfo
libblkid1-debuginfo-32bit
libblkid
libfdisk
libmount
libsmartcols
libuuid
util-linux-devel
util-linux-user
util-linux-help
libmount1-32bit-debuginfo
libsmartcols-devel-32bit
libfdisk1-32bit-debuginfo
libsmartcols1-32bit-debuginfo
libblkid-devel-32bit
libuuid1-64bit
libblkid-devel-64bit
libuuid-devel-64bit
libblkid1-64bit
libmount-devel-64bit
libsmartcols-devel-64bit
libsmartcols1-64bit
libmount1-64bit
libblkid1-64bit-debuginfo
libfdisk1-64bit
libfdisk1-64bit-debuginfo
libuuid1-64bit-debuginfo
libsmartcols1-64bit-debuginfo
libmount1-64bit-debuginfo
libfdisk-devel-64bit
libuuid1-32bit-debuginfo
libblkid1-32bit-debuginfo
libfdisk-devel-32bit
libfdisk1-32bit
libuuid-devel-32bit
libmount-devel-32bit
libsmartcols1-32bit
libblkid-devel-static
libfdisk-devel-static
libuuid-devel-static
libfdisk-devel
python3-libmount-debugsource
libsmartcols-devel-static
python3-libmount
python3-libmount-debuginfo
libmount-devel-static
util-linux-extra-debuginfo
util-linux-extra
util-linux-core
util-linux-i18n
liblastlog2-2-debuginfo
liblastlog2-2
lastlog2
lastlog2-debuginfo
util-linux-tty-tools
util-linux-tty-tools-debuginfo

How to mitigate CVE-2026-27456

Install updates from vendor's website.

Util-linux - update to 2.41.4
libmount1-32bit - addressed in versions 2.33.2-4.54.1, 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1, 2.40.4-150700.4.13.1
libblkid1-debuginfo - addressed in versions 2.33.2-4.54.1, 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1, 2.39.3-7.1, 2.40.4-slfo.1.1_6.1, 2.40.4-150700.4.13.1
libblkid1 - addressed in versions 2.33.2-4.54.1, 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1, 2.39.3-7.1, 2.40.4-slfo.1.1_6.1, 2.40.4-150700.4.13.1
libsmartcols-devel - addressed in versions 2.33.2-4.54.1, 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1, 2.40.4-150700.4.13.1
python-libmount - update to 2.33.2-4.54.1
util-linux-debugsource - addressed in versions 2.33.2-4.54.1, 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1, 2.39.3-7.1, 2.40.4-slfo.1.1_6.1, 2.40.4-150700.4.13.1
libuuid1-debuginfo-32bit - update to 2.33.2-4.54.1
util-linux-lang - addressed in versions 2.33.2-4.54.1, 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1, 2.40.4-150700.4.13.1
util-linux-systemd-debuginfo - addressed in versions 2.33.2-4.54.1, 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1, 2.39.3-7.1, 2.40.4-slfo.1.1_6.1, 2.40.4-150700.4.13.1
uuidd - addressed in versions 2.33.2-4.54.1, 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1, 2.40.4-150700.4.13.1
libuuid1 - addressed in versions 2.33.2-4.54.1, 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1, 2.39.3-7.1, 2.40.4-slfo.1.1_6.1, 2.40.4-150700.4.13.1
util-linux-systemd - addressed in versions 2.33.2-4.54.1, 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1, 2.39.3-7.1, 2.40.4-slfo.1.1_6.1, 2.40.4-150700.4.13.1
python-libmount-debuginfo - update to 2.33.2-4.54.1
libsmartcols1 - addressed in versions 2.33.2-4.54.1, 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1, 2.39.3-7.1, 2.40.4-slfo.1.1_6.1, 2.40.4-150700.4.13.1
libsmartcols1-debuginfo - addressed in versions 2.33.2-4.54.1, 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1, 2.39.3-7.1, 2.40.4-slfo.1.1_6.1, 2.40.4-150700.4.13.1
libfdisk1 - addressed in versions 2.33.2-4.54.1, 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1, 2.39.3-7.1, 2.40.4-slfo.1.1_6.1, 2.40.4-150700.4.13.1
libblkid-devel - addressed in versions 2.33.2-4.54.1, 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1, 2.40.4-150700.4.13.1
libmount1 - addressed in versions 2.33.2-4.54.1, 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1, 2.39.3-7.1, 2.40.4-slfo.1.1_6.1, 2.40.4-150700.4.13.1
util-linux-debuginfo - addressed in versions 2.33.2-4.54.1, 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1, 2.39.3-7.1, 2.40.4-slfo.1.1_6.1, 2.40.4-150700.4.13.1
libmount-devel - addressed in versions 2.33.2-4.54.1, 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1, 2.40.4-150700.4.13.1
uuidd-debuginfo - addressed in versions 2.33.2-4.54.1, 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1, 2.40.4-150700.4.13.1
libmount1-debuginfo - addressed in versions 2.33.2-4.54.1, 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1, 2.39.3-7.1, 2.40.4-slfo.1.1_6.1, 2.40.4-150700.4.13.1
util-linux-systemd-debugsource - addressed in versions 2.33.2-4.54.1, 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1, 2.39.3-7.1, 2.40.4-slfo.1.1_6.1, 2.40.4-150700.4.13.1
util-linux - addressed in versions 2.33.2-4.54.1, 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1, 2.39.3-7.1, 2.40.4-slfo.1.1_6.1, 2.40.4-150700.4.13.1
libfdisk1-debuginfo - addressed in versions 2.33.2-4.54.1, 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1, 2.39.3-7.1, 2.40.4-slfo.1.1_6.1, 2.40.4-150700.4.13.1
libblkid1-32bit - addressed in versions 2.33.2-4.54.1, 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1, 2.40.4-150700.4.13.1
libuuid-devel - addressed in versions 2.33.2-4.54.1, 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1, 2.40.4-150700.4.13.1
libmount1-debuginfo-32bit - update to 2.33.2-4.54.1
python-libmount-debugsource - update to 2.33.2-4.54.1
libuuid1-32bit - addressed in versions 2.33.2-4.54.1, 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1, 2.40.4-150700.4.13.1
libuuid1-debuginfo - addressed in versions 2.33.2-4.54.1, 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1, 2.39.3-7.1, 2.40.4-slfo.1.1_6.1, 2.40.4-150700.4.13.1
libblkid1-debuginfo-32bit - update to 2.33.2-4.54.1
util-linux-debugsource - update to 2.35.2-29
uuidd - update to 2.35.2-29
util-linux - update to 2.35.2-29
libblkid - update to 2.35.2-29
libfdisk - update to 2.35.2-29
libmount - update to 2.35.2-29
libsmartcols - update to 2.35.2-29
libuuid - update to 2.35.2-29
python-libmount - update to 2.35.2-29
util-linux-debuginfo - update to 2.35.2-29
util-linux-devel - update to 2.35.2-29
util-linux-user - update to 2.35.2-29
util-linux-help - update to 2.35.2-29
libmount1-32bit-debuginfo - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1, 2.40.4-150700.4.13.1
libsmartcols-devel-32bit - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1
libfdisk1-32bit-debuginfo - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1
libsmartcols1-32bit-debuginfo - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1
libblkid-devel-32bit - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1
libuuid1-64bit - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1
libblkid-devel-64bit - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1
libuuid-devel-64bit - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1
libblkid1-64bit - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1
libmount-devel-64bit - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1
libsmartcols-devel-64bit - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1
libsmartcols1-64bit - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1
libmount1-64bit - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1
libblkid1-64bit-debuginfo - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1
libfdisk1-64bit - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1
libfdisk1-64bit-debuginfo - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1
libuuid1-64bit-debuginfo - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1
libsmartcols1-64bit-debuginfo - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1
libmount1-64bit-debuginfo - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1
libfdisk-devel-64bit - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1
libuuid1-32bit-debuginfo - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1, 2.40.4-150700.4.13.1
libblkid1-32bit-debuginfo - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1, 2.40.4-150700.4.13.1
libfdisk-devel-32bit - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1
libfdisk1-32bit - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1
libuuid-devel-32bit - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1
libmount-devel-32bit - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1
libsmartcols1-32bit - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1
libblkid-devel-static - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1, 2.40.4-150700.4.13.1
libfdisk-devel-static - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1
libuuid-devel-static - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1, 2.40.4-150700.4.13.1
libfdisk-devel - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1, 2.40.4-150700.4.13.1
python3-libmount-debugsource - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1
libsmartcols-devel-static - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1
python3-libmount - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1
python3-libmount-debuginfo - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1
libmount-devel-static - addressed in versions 2.37.2-150400.8.47.1, 2.37.4-150500.9.29.1
util-linux-extra-debuginfo - addressed in versions 2.37.4-150500.9.29.1, 2.40.4-150700.4.13.1
util-linux-extra - addressed in versions 2.37.4-150500.9.29.1, 2.40.4-150700.4.13.1
libblkid - update to 2.39.1-9
libblkid-devel - update to 2.39.1-9
libfdisk - update to 2.39.1-9
libfdisk-devel - update to 2.39.1-9
libmount - update to 2.39.1-9
libmount-devel - update to 2.39.1-9
libsmartcols - update to 2.39.1-9
libsmartcols-devel - update to 2.39.1-9
libuuid - update to 2.39.1-9
libuuid-devel - update to 2.39.1-9
python3-libmount - update to 2.39.1-9
util-linux - update to 2.39.1-9
util-linux-core - update to 2.39.1-9
util-linux-i18n - update to 2.39.1-9
uuidd - update to 2.39.1-9
liblastlog2-2-debuginfo - update to 2.40.4-slfo.1.1_6.1
liblastlog2-2 - update to 2.40.4-slfo.1.1_6.1
lastlog2 - update to 2.40.4-slfo.1.1_6.1
lastlog2-debuginfo - update to 2.40.4-slfo.1.1_6.1
util-linux-tty-tools - update to 2.40.4-150700.4.13.1
util-linux-tty-tools-debuginfo - update to 2.40.4-150700.4.13.1
util-linux - addressed in versions 2.41.4-7.fc43, 2.41.4-7.fc44

External References

Related Security Bulletins