{"id":"UBUNTU-CVE-2026-53612","details":"[Local Privilege Escalation via TOCTOU in mount(8) hook_owner.c chmod/chown]","modified":"2026-08-31T22:15:32.267173749Z","published":"2026-06-18T00:00:00Z","related":["USN-8702-1"],"upstream":["CVE-2026-53612"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-53612"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2026-53612"},{"type":"REPORT","url":"https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-8702-1"}],"affected":[{"package":{"name":"util-linux","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/util-linux?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39.3-9ubuntu6.6"}]}],"versions":["2.39.1-4ubuntu2","2.39.2-6ubuntu1","2.39.3-6ubuntu2","2.39.3-9ubuntu2","2.39.3-9ubuntu4","2.39.3-9ubuntu6","2.39.3-9ubuntu6.1","2.39.3-9ubuntu6.2","2.39.3-9ubuntu6.3","2.39.3-9ubuntu6.4","2.39.3-9ubuntu6.5"],"ecosystem_specific":{"binaries":[{"binary_name":"bsdextrautils","binary_version":"2.39.3-9ubuntu6.6"},{"binary_version":"1:2.39.3-9ubuntu6.6","binary_name":"bsdutils"},{"binary_version":"2.39.3-9ubuntu6.6","binary_name":"eject"},{"binary_name":"fdisk","binary_version":"2.39.3-9ubuntu6.6"},{"binary_version":"2.39.3-9ubuntu6.6","binary_name":"libblkid1"},{"binary_version":"2.39.3-9ubuntu6.6","binary_name":"libfdisk1"},{"binary_version":"2.39.3-9ubuntu6.6","binary_name":"libmount1"},{"binary_version":"2.39.3-9ubuntu6.6","binary_name":"libsmartcols1"},{"binary_version":"2.39.3-9ubuntu6.6","binary_name":"libuuid1"},{"binary_version":"2.39.3-9ubuntu6.6","binary_name":"mount"},{"binary_name":"rfkill","binary_version":"2.39.3-9ubuntu6.6"},{"binary_name":"util-linux","binary_version":"2.39.3-9ubuntu6.6"},{"binary_name":"util-linux-extra","binary_version":"2.39.3-9ubuntu6.6"},{"binary_version":"2.39.3-9ubuntu6.6","binary_name":"util-linux-locales"},{"binary_name":"uuid-runtime","binary_version":"2.39.3-9ubuntu6.6"}],"availability":"No subscription required"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-53612.json"}},{"package":{"name":"util-linux","ecosystem":"Ubuntu:25.10","purl":"pkg:deb/ubuntu/util-linux?arch=source&distro=questing"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.40.2-14ubuntu1","2.41-4ubuntu2","2.41-4ubuntu3","2.41-4ubuntu4","2.41-4ubuntu4.1","2.41-4ubuntu4.2"],"ecosystem_specific":{"binaries":[{"binary_name":"bsdextrautils","binary_version":"2.41-4ubuntu4.2"},{"binary_version":"1:2.41-4ubuntu4.2","binary_name":"bsdutils"},{"binary_name":"eject","binary_version":"2.41-4ubuntu4.2"},{"binary_name":"fdisk","binary_version":"2.41-4ubuntu4.2"},{"binary_name":"lastlog2","binary_version":"2.41-4ubuntu4.2"},{"binary_name":"libblkid1","binary_version":"2.41-4ubuntu4.2"},{"binary_name":"libfdisk1","binary_version":"2.41-4ubuntu4.2"},{"binary_version":"2.41-4ubuntu4.2","binary_name":"liblastlog2-2"},{"binary_version":"2.41-4ubuntu4.2","binary_name":"libmount1"},{"binary_name":"libpam-lastlog2","binary_version":"2.41-4ubuntu4.2"},{"binary_name":"libsmartcols1","binary_version":"2.41-4ubuntu4.2"},{"binary_version":"2.41-4ubuntu4.2","binary_name":"libuuid1"},{"binary_name":"login","binary_version":"1:4.16.0-2+really2.41-4ubuntu4.2"},{"binary_name":"mount","binary_version":"2.41-4ubuntu4.2"},{"binary_version":"2.41-4ubuntu4.2","binary_name":"rfkill"},{"binary_name":"util-linux","binary_version":"2.41-4ubuntu4.2"},{"binary_version":"2.41-4ubuntu4.2","binary_name":"util-linux-extra"},{"binary_version":"2.41-4ubuntu4.2","binary_name":"util-linux-locales"},{"binary_name":"uuid-runtime","binary_version":"2.41-4ubuntu4.2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-53612.json"}},{"package":{"name":"util-linux","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/util-linux?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.41.3-3ubuntu2.2"}]}],"versions":["2.41-4ubuntu4","2.41.2-4ubuntu1","2.41.2-4ubuntu2","2.41.2-4ubuntu3","2.41.3-3ubuntu1","2.41.3-3ubuntu2"],"ecosystem_specific":{"binaries":[{"binary_name":"bsdextrautils","binary_version":"2.41.3-3ubuntu2.2"},{"binary_name":"bsdutils","binary_version":"1:2.41.3-3ubuntu2.2"},{"binary_name":"eject","binary_version":"2.41.3-3ubuntu2.2"},{"binary_name":"fdisk","binary_version":"2.41.3-3ubuntu2.2"},{"binary_name":"lastlog2","binary_version":"2.41.3-3ubuntu2.2"},{"binary_version":"2.41.3-3ubuntu2.2","binary_name":"libblkid1"},{"binary_version":"2.41.3-3ubuntu2.2","binary_name":"libfdisk1"},{"binary_version":"2.41.3-3ubuntu2.2","binary_name":"liblastlog2-2"},{"binary_name":"libmount1","binary_version":"2.41.3-3ubuntu2.2"},{"binary_version":"2.41.3-3ubuntu2.2","binary_name":"libpam-lastlog2"},{"binary_version":"2.41.3-3ubuntu2.2","binary_name":"libsmartcols1"},{"binary_version":"2.41.3-3ubuntu2.2","binary_name":"libuuid1"},{"binary_name":"login","binary_version":"1:4.16.0-2+really2.41.3-3ubuntu2.2"},{"binary_name":"mount","binary_version":"2.41.3-3ubuntu2.2"},{"binary_name":"rfkill","binary_version":"2.41.3-3ubuntu2.2"},{"binary_name":"util-linux","binary_version":"2.41.3-3ubuntu2.2"},{"binary_name":"util-linux-extra","binary_version":"2.41.3-3ubuntu2.2"},{"binary_version":"2.41.3-3ubuntu2.2","binary_name":"util-linux-locales"},{"binary_name":"uuid-runtime","binary_version":"2.41.3-3ubuntu2.2"}],"availability":"No subscription required"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-53612.json"}}],"schema_version":"1.9.0","severity":[{"type":"Ubuntu","score":"medium"}]}