{"id":"UBUNTU-CVE-2026-53614","details":"[Local Privilege Escalation via LIBMOUNT_FORCE_MOUNT2 Environment Variable - nosuid/noexec Bypass in SUID mount(8)]","modified":"2026-08-31T22:15:31.505474975Z","published":"2026-06-18T00:00:00Z","related":["USN-8702-1"],"upstream":["CVE-2026-53614"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-53614"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2026-53614"},{"type":"REPORT","url":"https://github.com/util-linux/util-linux/security/advisories/GHSA-67r7-8m5w-22wx"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-8702-1"}],"affected":[{"package":{"name":"util-linux","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/util-linux?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39.3-9ubuntu6.6"}]}],"versions":["2.39.1-4ubuntu2","2.39.2-6ubuntu1","2.39.3-6ubuntu2","2.39.3-9ubuntu2","2.39.3-9ubuntu4","2.39.3-9ubuntu6","2.39.3-9ubuntu6.1","2.39.3-9ubuntu6.2","2.39.3-9ubuntu6.3","2.39.3-9ubuntu6.4","2.39.3-9ubuntu6.5"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"bsdextrautils","binary_version":"2.39.3-9ubuntu6.6"},{"binary_name":"bsdutils","binary_version":"1:2.39.3-9ubuntu6.6"},{"binary_name":"eject","binary_version":"2.39.3-9ubuntu6.6"},{"binary_version":"2.39.3-9ubuntu6.6","binary_name":"fdisk"},{"binary_name":"libblkid1","binary_version":"2.39.3-9ubuntu6.6"},{"binary_name":"libfdisk1","binary_version":"2.39.3-9ubuntu6.6"},{"binary_name":"libmount1","binary_version":"2.39.3-9ubuntu6.6"},{"binary_version":"2.39.3-9ubuntu6.6","binary_name":"libsmartcols1"},{"binary_name":"libuuid1","binary_version":"2.39.3-9ubuntu6.6"},{"binary_name":"mount","binary_version":"2.39.3-9ubuntu6.6"},{"binary_name":"rfkill","binary_version":"2.39.3-9ubuntu6.6"},{"binary_name":"util-linux","binary_version":"2.39.3-9ubuntu6.6"},{"binary_version":"2.39.3-9ubuntu6.6","binary_name":"util-linux-extra"},{"binary_name":"util-linux-locales","binary_version":"2.39.3-9ubuntu6.6"},{"binary_name":"uuid-runtime","binary_version":"2.39.3-9ubuntu6.6"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-53614.json"}},{"package":{"name":"util-linux","ecosystem":"Ubuntu:25.10","purl":"pkg:deb/ubuntu/util-linux?arch=source&distro=questing"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.40.2-14ubuntu1","2.41-4ubuntu2","2.41-4ubuntu3","2.41-4ubuntu4","2.41-4ubuntu4.1","2.41-4ubuntu4.2"],"ecosystem_specific":{"binaries":[{"binary_version":"2.41-4ubuntu4.2","binary_name":"bsdextrautils"},{"binary_version":"1:2.41-4ubuntu4.2","binary_name":"bsdutils"},{"binary_name":"eject","binary_version":"2.41-4ubuntu4.2"},{"binary_name":"fdisk","binary_version":"2.41-4ubuntu4.2"},{"binary_version":"2.41-4ubuntu4.2","binary_name":"lastlog2"},{"binary_name":"libblkid1","binary_version":"2.41-4ubuntu4.2"},{"binary_name":"libfdisk1","binary_version":"2.41-4ubuntu4.2"},{"binary_version":"2.41-4ubuntu4.2","binary_name":"liblastlog2-2"},{"binary_version":"2.41-4ubuntu4.2","binary_name":"libmount1"},{"binary_version":"2.41-4ubuntu4.2","binary_name":"libpam-lastlog2"},{"binary_version":"2.41-4ubuntu4.2","binary_name":"libsmartcols1"},{"binary_version":"2.41-4ubuntu4.2","binary_name":"libuuid1"},{"binary_version":"1:4.16.0-2+really2.41-4ubuntu4.2","binary_name":"login"},{"binary_name":"mount","binary_version":"2.41-4ubuntu4.2"},{"binary_name":"rfkill","binary_version":"2.41-4ubuntu4.2"},{"binary_version":"2.41-4ubuntu4.2","binary_name":"util-linux"},{"binary_name":"util-linux-extra","binary_version":"2.41-4ubuntu4.2"},{"binary_name":"util-linux-locales","binary_version":"2.41-4ubuntu4.2"},{"binary_name":"uuid-runtime","binary_version":"2.41-4ubuntu4.2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-53614.json"}},{"package":{"name":"util-linux","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/util-linux?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.41.3-3ubuntu2.2"}]}],"versions":["2.41-4ubuntu4","2.41.2-4ubuntu1","2.41.2-4ubuntu2","2.41.2-4ubuntu3","2.41.3-3ubuntu1","2.41.3-3ubuntu2"],"ecosystem_specific":{"binaries":[{"binary_name":"bsdextrautils","binary_version":"2.41.3-3ubuntu2.2"},{"binary_version":"1:2.41.3-3ubuntu2.2","binary_name":"bsdutils"},{"binary_version":"2.41.3-3ubuntu2.2","binary_name":"eject"},{"binary_name":"fdisk","binary_version":"2.41.3-3ubuntu2.2"},{"binary_name":"lastlog2","binary_version":"2.41.3-3ubuntu2.2"},{"binary_name":"libblkid1","binary_version":"2.41.3-3ubuntu2.2"},{"binary_version":"2.41.3-3ubuntu2.2","binary_name":"libfdisk1"},{"binary_name":"liblastlog2-2","binary_version":"2.41.3-3ubuntu2.2"},{"binary_name":"libmount1","binary_version":"2.41.3-3ubuntu2.2"},{"binary_name":"libpam-lastlog2","binary_version":"2.41.3-3ubuntu2.2"},{"binary_name":"libsmartcols1","binary_version":"2.41.3-3ubuntu2.2"},{"binary_version":"2.41.3-3ubuntu2.2","binary_name":"libuuid1"},{"binary_name":"login","binary_version":"1:4.16.0-2+really2.41.3-3ubuntu2.2"},{"binary_name":"mount","binary_version":"2.41.3-3ubuntu2.2"},{"binary_name":"rfkill","binary_version":"2.41.3-3ubuntu2.2"},{"binary_version":"2.41.3-3ubuntu2.2","binary_name":"util-linux"},{"binary_name":"util-linux-extra","binary_version":"2.41.3-3ubuntu2.2"},{"binary_name":"util-linux-locales","binary_version":"2.41.3-3ubuntu2.2"},{"binary_version":"2.41.3-3ubuntu2.2","binary_name":"uuid-runtime"}],"availability":"No subscription required"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-53614.json"}}],"schema_version":"1.9.0","severity":[{"type":"Ubuntu","score":"medium"}]}