Kernel Util-linux
18 CVEs affecting Kernel Util-linux. Latest disclosed: 2026-06-29. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-5224 | Critical | 9.8 | 2017-08-23 | The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly other attacks. |
CVE-2018-7738 | High | 7.8 | 2018-03-07 | In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands in a mountpoint name, which is mishandl… |
CVE-2014-9114 | High | 7.8 | 2017-03-31 | Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code. |
CVE-2016-2779 | High | 7.8 | 2017-02-07 | runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buff… |
CVE-2026-13595 | Medium | 6.8 | 2026-06-29 | A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a ra… |
CVE-2020-21583 | Medium | 6.7 | 2023-08-22 | An issue was discovered in hwclock.13-v2.27 allows attackers to gain escalated privlidges or execute arbitrary commands via the path parameter when setting the… |
CVE-2021-3996 | Medium | 5.5 | 2022-08-23 | A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows a… |
CVE-2021-3995 | Medium | 5.5 | 2022-08-23 | A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows a… |
CVE-2022-0563 | Medium | 5.5 | 2022-02-21 | A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to… |
CVE-2021-37600 | Medium | 5.5 | 2021-07-30 | An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads t… |
CVE-2001-1494 | Medium | 5.5 | 2001-12-31 | script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any… |
CVE-2026-27456 | Medium | 4.7 | 2026-04-03 | util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU (Time-of-Check-Time-of-Use) vulnerability has been identified in the SU… |
CVE-2016-5011 | Medium | 4.6 | 2017-04-11 | The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a denial of service (m… |
CVE-2026-3184 | Low | 3.7 | 2026-04-03 | A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied remote… |
CVE-2024-28085 | Low | 3.3 | 2024-03-27 | wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Speci… |
CVE-2015-5218 | | 2015-11-09 | Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service (crash) via a crafted file, related… | |
CVE-2013-0157 | | 2014-01-21 | (a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by (1… | |
CVE-2007-5191 | | 2007-10-04 | mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow… |