util-linux has 4 CVEs on record. 4 were published in the last 90 days. The busiest recent month was October 2026 with 4. The median CVSS is 7.0 (high).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.0
- Publish → KEV
- —
- Last 90 days
- 4 prev 0
Worst active — by depth score
CVE-2026-53613High· 7.0util-linux is a random collection of Linux utilities51CVE-2026-53612High· 7.0util-linux is a random collection of Linux utilities51CVE-2026-53615High· 8.0util-linux is a random collection of Linux utilities44CVE-2026-53614High· 7.0util-linux is a random collection of Linux utilities39
util-linux vulnerabilities
CVEs affecting util-linux, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2026-53615High· 8.0util-linux is a random collection of Linux utilities
util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-ar…
CVE-2026-53614High· 7.0util-linux is a random collection of Linux utilities
util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility reads the attacker-controlled `LIBMOUNT_FORCE_MOUNT2` environment variable with `getenv()`, allow…
CVE-2026-53613High· 7.0PoCutil-linux is a random collection of Linux utilities
util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/et…
CVE-2026-53612High· 7.0PoCutil-linux is a random collection of Linux utilities
util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility's `hook_owner.c` post-mount hook performs path-based `chmod()` and `lchown()` operations on a previ…