Use After Free in Kernel Util-Linux
CVE-2026-13595
A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a parent partition entry in a dynamically allocated array. When subsequent partition additions cause the array to be reallocated, this pointer becomes stale, leading to a heap use-after-free read. An attacker who can present a crafted block device image (for example, via USB insertion or a loop-mounted disk image) can trigger this flaw without user interaction, as libblkid is invoked automatically by udev/udisks as root on block-device hot-plug events. This could lead to limited information disclosure or denial of service.
Vulnerability class: Use-After-Free
EPSS: 0.001 (1.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H.
Affected products
- Kernel Util-linux
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Red Hat Hardened Images — versions 2.42.2-1.hum1
- Red Hat Openshift Container Platform 4
- Redhat Enterprise_linux — versions 7.0, 8.0, 9.0
- Redhat Hardened_images
- Redhat Openshift_container_platform
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_REDHAT, vdb-entry, Vendor Advisory)
- secalert@redhat.com (x_refsource_REDHAT, issue-tracking, Issue Tracking, Vendor Advisory)
- secalert@redhat.com (Patch)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2026-13595?
- CVE-2026-13595 is a medium-severity vulnerability in Kernel Util-Linux, classified under Use After Free. CVSS score: 6.8/10. Published 2026-06-29.
- How severe is CVE-2026-13595?
- Medium severity. CVSS v3 base score is 6.8 out of 10.