{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "util-linux: all CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/util-linux--util-linux/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/util-linux--util-linux/all.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53615/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53615/",
   "title": "CVE-2026-53615 · util-linux · disclosed",
   "content_text": "util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who causes a crafted DOS extended-partition disk image or removable medium to be probed can wrap `cur_start + start` to sector zero and cause libblkid to report a false partition overlapping the MBR. This directly compromises the integrity of the reported partition metadata; disk modification or availability loss requires a separate downstream consumer to act on that metadata. This issue is fixed in 2.41.4.",
   "date_published": "2026-10-14T15:56:45Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53615/fixed/debian-13",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53615/",
   "title": "CVE-2026-53615 · util-linux · fixed in Debian 13 (util-linux 2.41.5-0+deb13u1)",
   "content_text": "Fixed versions: util-linux 2.41.5-0+deb13u1.",
   "date_published": "2026-10-14T15:56:45Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53615/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53615/",
   "title": "CVE-2026-53615 · util-linux · fixed in Debian 14 (util-linux 2.42-1)",
   "content_text": "Fixed versions: util-linux 2.42-1.",
   "date_published": "2026-10-14T15:56:45Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53615/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53615/",
   "title": "CVE-2026-53615 · util-linux · fixed in Ubuntu 22.04 LTS (util-linux 2.37.2-4ubuntu3.6)",
   "content_text": "Fixed versions: util-linux 2.37.2-4ubuntu3.6.",
   "date_published": "2026-10-14T15:56:45Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53615/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53615/",
   "title": "CVE-2026-53615 · util-linux · fixed in Ubuntu 24.04 LTS (util-linux 2.39.3-9ubuntu6.6)",
   "content_text": "Fixed versions: util-linux 2.39.3-9ubuntu6.6.",
   "date_published": "2026-10-14T15:56:45Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53615/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53615/",
   "title": "CVE-2026-53615 · util-linux · fixed in Ubuntu 26.04 LTS (util-linux 2.41.3-3ubuntu2.2)",
   "content_text": "Fixed versions: util-linux 2.41.3-3ubuntu2.2.",
   "date_published": "2026-10-14T15:56:45Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53614/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53614/",
   "title": "CVE-2026-53614 · util-linux · disclosed",
   "content_text": "util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility reads the attacker-controlled `LIBMOUNT_FORCE_MOUNT2` environment variable with `getenv()`, allowing a local low-privileged\nuser to force the non-atomic legacy bind-mount path. With an `/etc/fstab` bind mount authorized by `user` or `users` and protected by `nosuid`, `noexec`, or `nodev`, an attacker can race the window between the initial bind mount and the remount that applies those security flags and execute a SUID program from the temporarily unprotected mount, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.",
   "date_published": "2026-10-14T15:40:53Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53614/fixed/alpine-v3.22",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53614/",
   "title": "CVE-2026-53614 · util-linux · fixed in Alpine 3.22 (util-linux 2.41.6-r0)",
   "content_text": "Fixed versions: util-linux 2.41.6-r0.",
   "date_published": "2026-10-14T15:40:53Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53614/fixed/alpine-v3.23",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53614/",
   "title": "CVE-2026-53614 · util-linux · fixed in Alpine 3.23 (util-linux 2.41.6-r0)",
   "content_text": "Fixed versions: util-linux 2.41.6-r0.",
   "date_published": "2026-10-14T15:40:53Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53614/fixed/alpine-v3.24",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53614/",
   "title": "CVE-2026-53614 · util-linux · fixed in Alpine 3.24 (util-linux 2.42.3-r0)",
   "content_text": "Fixed versions: util-linux 2.42.3-r0.",
   "date_published": "2026-10-14T15:40:53Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53614/fixed/debian-13",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53614/",
   "title": "CVE-2026-53614 · util-linux · fixed in Debian 13 (util-linux 2.41.5-0+deb13u1)",
   "content_text": "Fixed versions: util-linux 2.41.5-0+deb13u1.",
   "date_published": "2026-10-14T15:40:53Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53614/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53614/",
   "title": "CVE-2026-53614 · util-linux · fixed in Debian 14 (util-linux 2.42.2-1)",
   "content_text": "Fixed versions: util-linux 2.42.2-1.",
   "date_published": "2026-10-14T15:40:53Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53614/fixed/opensuse-leap-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53614/",
   "title": "CVE-2026-53614 · util-linux · fixed in openSUSE Leap 16.0 (python-libmount 2.41.1-160000.5.1 and 2 more)",
   "content_text": "Fixed versions: python-libmount 2.41.1-160000.5.1, util-linux 2.41.1-160000.5.1, util-linux-systemd 2.41.1-160000.5.1.",
   "date_published": "2026-10-14T15:40:53Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53614/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53614/",
   "title": "CVE-2026-53614 · util-linux · fixed in openSUSE Tumbleweed (util-linux 2.42.2-1.1)",
   "content_text": "Fixed versions: util-linux 2.42.2-1.1.",
   "date_published": "2026-10-14T15:40:53Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53614/fixed/suse-linux-enterprise-module-for-basesystem-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53614/",
   "title": "CVE-2026-53614 · util-linux · fixed in SUSE Linux Enterprise Module for Basesystem 15 SP7 (util-linux 2.40.4-150700.4.18.1 and 1 more)",
   "content_text": "Fixed versions: util-linux 2.40.4-150700.4.18.1, util-linux-systemd 2.40.4-150700.4.18.1.",
   "date_published": "2026-10-14T15:40:53Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53614/fixed/suse-linux-enterprise-module-for-server-applications-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53614/",
   "title": "CVE-2026-53614 · util-linux · fixed in SUSE Linux Enterprise Module for Server Applications 15 SP7 (util-linux-systemd 2.40.4-150700.4.18.1)",
   "content_text": "Fixed versions: util-linux-systemd 2.40.4-150700.4.18.1.",
   "date_published": "2026-10-14T15:40:53Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53614/fixed/suse-linux-enterprise-server-15-sp6-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53614/",
   "title": "CVE-2026-53614 · util-linux · fixed in SUSE Linux Enterprise Server 15 SP6-LTSS (util-linux 2.39.3-150600.4.26.1 and 1 more)",
   "content_text": "Fixed versions: util-linux 2.39.3-150600.4.26.1, util-linux-systemd 2.39.3-150600.4.26.1.",
   "date_published": "2026-10-14T15:40:53Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53614/fixed/suse-linux-enterprise-server-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53614/",
   "title": "CVE-2026-53614 · util-linux · fixed in SUSE Linux Enterprise Server 16.0 (python-libmount 2.41.1-160000.5.1 and 2 more)",
   "content_text": "Fixed versions: python-libmount 2.41.1-160000.5.1, util-linux 2.41.1-160000.5.1, util-linux-systemd 2.41.1-160000.5.1.",
   "date_published": "2026-10-14T15:40:53Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53614/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp6",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53614/",
   "title": "CVE-2026-53614 · util-linux · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP6 (util-linux 2.39.3-150600.4.26.1 and 1 more)",
   "content_text": "Fixed versions: util-linux 2.39.3-150600.4.26.1, util-linux-systemd 2.39.3-150600.4.26.1.",
   "date_published": "2026-10-14T15:40:53Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53614/fixed/suse-linux-enterprise-server-for-sap-applications-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53614/",
   "title": "CVE-2026-53614 · util-linux · fixed in SUSE Linux Enterprise Server for SAP applications 16.0 (python-libmount 2.41.1-160000.5.1 and 2 more)",
   "content_text": "Fixed versions: python-libmount 2.41.1-160000.5.1, util-linux 2.41.1-160000.5.1, util-linux-systemd 2.41.1-160000.5.1.",
   "date_published": "2026-10-14T15:40:53Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53614/fixed/suse-linux-micro-6.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53614/",
   "title": "CVE-2026-53614 · util-linux · fixed in SUSE Linux Micro 6.0 (util-linux 2.39.3-8.1 and 1 more)",
   "content_text": "Fixed versions: util-linux 2.39.3-8.1, util-linux-systemd 2.39.3-8.1.",
   "date_published": "2026-10-14T15:40:53Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53614/fixed/suse-linux-micro-6.1",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53614/",
   "title": "CVE-2026-53614 · util-linux · fixed in SUSE Linux Micro 6.1 (util-linux 2.40.4-slfo.1.1_7.1 and 1 more)",
   "content_text": "Fixed versions: util-linux 2.40.4-slfo.1.1_7.1, util-linux-systemd 2.40.4-slfo.1.1_7.1.",
   "date_published": "2026-10-14T15:40:53Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53614/fixed/suse-linux-micro-6.2",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53614/",
   "title": "CVE-2026-53614 · util-linux · fixed in SUSE Linux Micro 6.2 (util-linux 2.41.1-160000.5.1 and 1 more)",
   "content_text": "Fixed versions: util-linux 2.41.1-160000.5.1, util-linux-systemd 2.41.1-160000.5.1.",
   "date_published": "2026-10-14T15:40:53Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53614/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53614/",
   "title": "CVE-2026-53614 · util-linux · fixed in Ubuntu 22.04 LTS (util-linux 2.37.2-4ubuntu3.6)",
   "content_text": "Fixed versions: util-linux 2.37.2-4ubuntu3.6.",
   "date_published": "2026-10-14T15:40:53Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53614/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53614/",
   "title": "CVE-2026-53614 · util-linux · fixed in Ubuntu 24.04 LTS (util-linux 2.39.3-9ubuntu6.6)",
   "content_text": "Fixed versions: util-linux 2.39.3-9ubuntu6.6.",
   "date_published": "2026-10-14T15:40:53Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53614/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53614/",
   "title": "CVE-2026-53614 · util-linux · fixed in Ubuntu 26.04 LTS (util-linux 2.41.3-3ubuntu2.2)",
   "content_text": "Fixed versions: util-linux 2.41.3-3ubuntu2.2.",
   "date_published": "2026-10-14T15:40:53Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53613/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53613/",
   "title": "CVE-2026-53613 · util-linux · disclosed",
   "content_text": "util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before the mount operation re-resolves that pathname. A local low-privileged user authorized by an fstab `user` or `users` entry whose target has an attacker-writable ancestor can use `renameat2(RENAME_EXCHANGE)` to swap a path component and redirect an authorized mount to a root-owned location, such as mounting attacker-controlled content over `/etc/sudoers.d`, and thereby gain root privileges. Versions 2.41.5 and 2.42.2 pin targets for the new mount API, and 2.42.4 pins legacy targets through `/proc/self/fd`; the documented legacy fallback without `/proc` remains affected.",
   "date_published": "2026-10-14T14:52:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53613/fixed/alpine-v3.22",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53613/",
   "title": "CVE-2026-53613 · util-linux · fixed in Alpine 3.22 (util-linux 2.41.6-r0)",
   "content_text": "Fixed versions: util-linux 2.41.6-r0.",
   "date_published": "2026-10-14T14:52:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53613/fixed/alpine-v3.23",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53613/",
   "title": "CVE-2026-53613 · util-linux · fixed in Alpine 3.23 (util-linux 2.41.6-r0)",
   "content_text": "Fixed versions: util-linux 2.41.6-r0.",
   "date_published": "2026-10-14T14:52:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53613/fixed/alpine-v3.24",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53613/",
   "title": "CVE-2026-53613 · util-linux · fixed in Alpine 3.24 (util-linux 2.42.3-r0)",
   "content_text": "Fixed versions: util-linux 2.42.3-r0.",
   "date_published": "2026-10-14T14:52:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53613/fixed/debian-13",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53613/",
   "title": "CVE-2026-53613 · util-linux · fixed in Debian 13 (util-linux 2.41.5-0+deb13u1)",
   "content_text": "Fixed versions: util-linux 2.41.5-0+deb13u1.",
   "date_published": "2026-10-14T14:52:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53613/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53613/",
   "title": "CVE-2026-53613 · util-linux · fixed in Debian 14 (util-linux 2.42.2-1)",
   "content_text": "Fixed versions: util-linux 2.42.2-1.",
   "date_published": "2026-10-14T14:52:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53613/fixed/opensuse-leap-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53613/",
   "title": "CVE-2026-53613 · util-linux · fixed in openSUSE Leap 16.0 (python-libmount 2.41.1-160000.5.1 and 2 more)",
   "content_text": "Fixed versions: python-libmount 2.41.1-160000.5.1, util-linux 2.41.1-160000.5.1, util-linux-systemd 2.41.1-160000.5.1.",
   "date_published": "2026-10-14T14:52:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53613/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53613/",
   "title": "CVE-2026-53613 · util-linux · fixed in openSUSE Tumbleweed (util-linux 2.42.2-1.1)",
   "content_text": "Fixed versions: util-linux 2.42.2-1.1.",
   "date_published": "2026-10-14T14:52:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53613/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53613/",
   "title": "CVE-2026-53613 · util-linux · fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS (util-linux 2.37.2-150400.8.50.1 and 1 more)",
   "content_text": "Fixed versions: util-linux 2.37.2-150400.8.50.1, util-linux-systemd 2.37.2-150400.8.50.1.",
   "date_published": "2026-10-14T14:52:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53613/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53613/",
   "title": "CVE-2026-53613 · util-linux · fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS (util-linux 2.37.2-150400.8.50.1 and 1 more)",
   "content_text": "Fixed versions: util-linux 2.37.2-150400.8.50.1, util-linux-systemd 2.37.2-150400.8.50.1.",
   "date_published": "2026-10-14T14:52:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53613/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53613/",
   "title": "CVE-2026-53613 · util-linux · fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS (util-linux 2.37.4-150500.9.32.1 and 1 more)",
   "content_text": "Fixed versions: util-linux 2.37.4-150500.9.32.1, util-linux-systemd 2.37.4-150500.9.32.1.",
   "date_published": "2026-10-14T14:52:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53613/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53613/",
   "title": "CVE-2026-53613 · util-linux · fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS (util-linux 2.37.4-150500.9.32.1 and 1 more)",
   "content_text": "Fixed versions: util-linux 2.37.4-150500.9.32.1, util-linux-systemd 2.37.4-150500.9.32.1.",
   "date_published": "2026-10-14T14:52:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53613/fixed/suse-linux-enterprise-micro-5.3",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53613/",
   "title": "CVE-2026-53613 · util-linux · fixed in SUSE Linux Enterprise Micro 5.3 (util-linux 2.37.2-150400.8.50.1 and 1 more)",
   "content_text": "Fixed versions: util-linux 2.37.2-150400.8.50.1, util-linux-systemd 2.37.2-150400.8.50.1.",
   "date_published": "2026-10-14T14:52:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53613/fixed/suse-linux-enterprise-micro-5.4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53613/",
   "title": "CVE-2026-53613 · util-linux · fixed in SUSE Linux Enterprise Micro 5.4 (util-linux 2.37.2-150400.8.50.1 and 1 more)",
   "content_text": "Fixed versions: util-linux 2.37.2-150400.8.50.1, util-linux-systemd 2.37.2-150400.8.50.1.",
   "date_published": "2026-10-14T14:52:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53613/fixed/suse-linux-enterprise-micro-5.5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53613/",
   "title": "CVE-2026-53613 · util-linux · fixed in SUSE Linux Enterprise Micro 5.5 (util-linux 2.37.4-150500.9.32.1 and 1 more)",
   "content_text": "Fixed versions: util-linux 2.37.4-150500.9.32.1, util-linux-systemd 2.37.4-150500.9.32.1.",
   "date_published": "2026-10-14T14:52:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53613/fixed/suse-linux-enterprise-module-for-basesystem-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53613/",
   "title": "CVE-2026-53613 · util-linux · fixed in SUSE Linux Enterprise Module for Basesystem 15 SP7 (util-linux 2.40.4-150700.4.18.1 and 1 more)",
   "content_text": "Fixed versions: util-linux 2.40.4-150700.4.18.1, util-linux-systemd 2.40.4-150700.4.18.1.",
   "date_published": "2026-10-14T14:52:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53613/fixed/suse-linux-enterprise-module-for-server-applications-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53613/",
   "title": "CVE-2026-53613 · util-linux · fixed in SUSE Linux Enterprise Module for Server Applications 15 SP7 (util-linux-systemd 2.40.4-150700.4.18.1)",
   "content_text": "Fixed versions: util-linux-systemd 2.40.4-150700.4.18.1.",
   "date_published": "2026-10-14T14:52:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53613/fixed/suse-linux-enterprise-server-12-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53613/",
   "title": "CVE-2026-53613 · util-linux · fixed in SUSE Linux Enterprise Server 12 SP5-LTSS (python-libmount 2.33.2-4.57.1 and 2 more)",
   "content_text": "Fixed versions: python-libmount 2.33.2-4.57.1, util-linux 2.33.2-4.57.1, util-linux-systemd 2.33.2-4.57.1.",
   "date_published": "2026-10-14T14:52:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53613/fixed/suse-linux-enterprise-server-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53613/",
   "title": "CVE-2026-53613 · util-linux · fixed in SUSE Linux Enterprise Server 15 SP4-LTSS (util-linux 2.37.2-150400.8.50.1 and 1 more)",
   "content_text": "Fixed versions: util-linux 2.37.2-150400.8.50.1, util-linux-systemd 2.37.2-150400.8.50.1.",
   "date_published": "2026-10-14T14:52:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53613/fixed/suse-linux-enterprise-server-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53613/",
   "title": "CVE-2026-53613 · util-linux · fixed in SUSE Linux Enterprise Server 15 SP5-LTSS (util-linux 2.37.4-150500.9.32.1 and 1 more)",
   "content_text": "Fixed versions: util-linux 2.37.4-150500.9.32.1, util-linux-systemd 2.37.4-150500.9.32.1.",
   "date_published": "2026-10-14T14:52:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53613/fixed/suse-linux-enterprise-server-15-sp6-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53613/",
   "title": "CVE-2026-53613 · util-linux · fixed in SUSE Linux Enterprise Server 15 SP6-LTSS (util-linux 2.39.3-150600.4.26.1 and 1 more)",
   "content_text": "Fixed versions: util-linux 2.39.3-150600.4.26.1, util-linux-systemd 2.39.3-150600.4.26.1.",
   "date_published": "2026-10-14T14:52:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53613/fixed/suse-linux-enterprise-server-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53613/",
   "title": "CVE-2026-53613 · util-linux · fixed in SUSE Linux Enterprise Server 16.0 (python-libmount 2.41.1-160000.5.1 and 2 more)",
   "content_text": "Fixed versions: python-libmount 2.41.1-160000.5.1, util-linux 2.41.1-160000.5.1, util-linux-systemd 2.41.1-160000.5.1.",
   "date_published": "2026-10-14T14:52:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53613/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53613/",
   "title": "CVE-2026-53613 · util-linux · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP4 (util-linux 2.37.2-150400.8.50.1 and 1 more)",
   "content_text": "Fixed versions: util-linux 2.37.2-150400.8.50.1, util-linux-systemd 2.37.2-150400.8.50.1.",
   "date_published": "2026-10-14T14:52:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53613/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53613/",
   "title": "CVE-2026-53613 · util-linux · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP5 (util-linux 2.37.4-150500.9.32.1 and 1 more)",
   "content_text": "Fixed versions: util-linux 2.37.4-150500.9.32.1, util-linux-systemd 2.37.4-150500.9.32.1.",
   "date_published": "2026-10-14T14:52:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53613/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp6",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53613/",
   "title": "CVE-2026-53613 · util-linux · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP6 (util-linux 2.39.3-150600.4.26.1 and 1 more)",
   "content_text": "Fixed versions: util-linux 2.39.3-150600.4.26.1, util-linux-systemd 2.39.3-150600.4.26.1.",
   "date_published": "2026-10-14T14:52:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53613/fixed/suse-linux-enterprise-server-for-sap-applications-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53613/",
   "title": "CVE-2026-53613 · util-linux · fixed in SUSE Linux Enterprise Server for SAP applications 16.0 (python-libmount 2.41.1-160000.5.1 and 2 more)",
   "content_text": "Fixed versions: python-libmount 2.41.1-160000.5.1, util-linux 2.41.1-160000.5.1, util-linux-systemd 2.41.1-160000.5.1.",
   "date_published": "2026-10-14T14:52:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53613/fixed/suse-linux-enterprise-server-ltss-extended-security-12-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53613/",
   "title": "CVE-2026-53613 · util-linux · fixed in SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 (python-libmount 2.33.2-4.57.1 and 2 more)",
   "content_text": "Fixed versions: python-libmount 2.33.2-4.57.1, util-linux 2.33.2-4.57.1, util-linux-systemd 2.33.2-4.57.1.",
   "date_published": "2026-10-14T14:52:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53613/fixed/suse-linux-micro-6.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53613/",
   "title": "CVE-2026-53613 · util-linux · fixed in SUSE Linux Micro 6.0 (util-linux 2.39.3-8.1 and 1 more)",
   "content_text": "Fixed versions: util-linux 2.39.3-8.1, util-linux-systemd 2.39.3-8.1.",
   "date_published": "2026-10-14T14:52:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53613/fixed/suse-linux-micro-6.1",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53613/",
   "title": "CVE-2026-53613 · util-linux · fixed in SUSE Linux Micro 6.1 (util-linux 2.40.4-slfo.1.1_7.1 and 1 more)",
   "content_text": "Fixed versions: util-linux 2.40.4-slfo.1.1_7.1, util-linux-systemd 2.40.4-slfo.1.1_7.1.",
   "date_published": "2026-10-14T14:52:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53613/fixed/suse-linux-micro-6.2",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53613/",
   "title": "CVE-2026-53613 · util-linux · fixed in SUSE Linux Micro 6.2 (util-linux 2.41.1-160000.5.1 and 1 more)",
   "content_text": "Fixed versions: util-linux 2.41.1-160000.5.1, util-linux-systemd 2.41.1-160000.5.1.",
   "date_published": "2026-10-14T14:52:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53613/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53613/",
   "title": "CVE-2026-53613 · util-linux · fixed in Ubuntu 22.04 LTS (util-linux 2.37.2-4ubuntu3.6)",
   "content_text": "Fixed versions: util-linux 2.37.2-4ubuntu3.6.",
   "date_published": "2026-10-14T14:52:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53613/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53613/",
   "title": "CVE-2026-53613 · util-linux · fixed in Ubuntu 24.04 LTS (util-linux 2.39.3-9ubuntu6.6)",
   "content_text": "Fixed versions: util-linux 2.39.3-9ubuntu6.6.",
   "date_published": "2026-10-14T14:52:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53613/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53613/",
   "title": "CVE-2026-53613 · util-linux · fixed in Ubuntu 26.04 LTS (util-linux 2.41.3-3ubuntu2.2)",
   "content_text": "Fixed versions: util-linux 2.41.3-3ubuntu2.2.",
   "date_published": "2026-10-14T14:52:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53612/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53612/",
   "title": "CVE-2026-53612 · util-linux · disclosed",
   "content_text": "util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility's `hook_owner.c` post-mount hook performs path-based `chmod()` and `lchown()` operations on a previously validated mount target. A local low-privileged user authorized by an `/etc/fstab` entry with `user` or `users` and an `X-mount.mode`, `X-mount.owner`, or `X-mount.group` option can use `renameat2(RENAME_EXCHANGE)` to race a writable ancestor of the target and redirect the privileged ownership or mode change to a root-owned path, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.",
   "date_published": "2026-10-14T14:47:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53612/fixed/alpine-v3.22",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53612/",
   "title": "CVE-2026-53612 · util-linux · fixed in Alpine 3.22 (util-linux 2.41.6-r0)",
   "content_text": "Fixed versions: util-linux 2.41.6-r0.",
   "date_published": "2026-10-14T14:47:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53612/fixed/alpine-v3.23",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53612/",
   "title": "CVE-2026-53612 · util-linux · fixed in Alpine 3.23 (util-linux 2.41.6-r0)",
   "content_text": "Fixed versions: util-linux 2.41.6-r0.",
   "date_published": "2026-10-14T14:47:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53612/fixed/alpine-v3.24",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53612/",
   "title": "CVE-2026-53612 · util-linux · fixed in Alpine 3.24 (util-linux 2.42.3-r0)",
   "content_text": "Fixed versions: util-linux 2.42.3-r0.",
   "date_published": "2026-10-14T14:47:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53612/fixed/debian-13",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53612/",
   "title": "CVE-2026-53612 · util-linux · fixed in Debian 13 (util-linux 2.41.5-0+deb13u1)",
   "content_text": "Fixed versions: util-linux 2.41.5-0+deb13u1.",
   "date_published": "2026-10-14T14:47:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53612/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53612/",
   "title": "CVE-2026-53612 · util-linux · fixed in Debian 14 (util-linux 2.42.2-1)",
   "content_text": "Fixed versions: util-linux 2.42.2-1.",
   "date_published": "2026-10-14T14:47:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53612/fixed/opensuse-leap-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53612/",
   "title": "CVE-2026-53612 · util-linux · fixed in openSUSE Leap 16.0 (python-libmount 2.41.1-160000.5.1 and 2 more)",
   "content_text": "Fixed versions: python-libmount 2.41.1-160000.5.1, util-linux 2.41.1-160000.5.1, util-linux-systemd 2.41.1-160000.5.1.",
   "date_published": "2026-10-14T14:47:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53612/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53612/",
   "title": "CVE-2026-53612 · util-linux · fixed in openSUSE Tumbleweed (util-linux 2.42.2-1.1)",
   "content_text": "Fixed versions: util-linux 2.42.2-1.1.",
   "date_published": "2026-10-14T14:47:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53612/fixed/suse-linux-enterprise-module-for-basesystem-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53612/",
   "title": "CVE-2026-53612 · util-linux · fixed in SUSE Linux Enterprise Module for Basesystem 15 SP7 (util-linux 2.40.4-150700.4.18.1 and 1 more)",
   "content_text": "Fixed versions: util-linux 2.40.4-150700.4.18.1, util-linux-systemd 2.40.4-150700.4.18.1.",
   "date_published": "2026-10-14T14:47:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53612/fixed/suse-linux-enterprise-module-for-server-applications-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53612/",
   "title": "CVE-2026-53612 · util-linux · fixed in SUSE Linux Enterprise Module for Server Applications 15 SP7 (util-linux-systemd 2.40.4-150700.4.18.1)",
   "content_text": "Fixed versions: util-linux-systemd 2.40.4-150700.4.18.1.",
   "date_published": "2026-10-14T14:47:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53612/fixed/suse-linux-enterprise-server-15-sp6-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53612/",
   "title": "CVE-2026-53612 · util-linux · fixed in SUSE Linux Enterprise Server 15 SP6-LTSS (util-linux 2.39.3-150600.4.26.1 and 1 more)",
   "content_text": "Fixed versions: util-linux 2.39.3-150600.4.26.1, util-linux-systemd 2.39.3-150600.4.26.1.",
   "date_published": "2026-10-14T14:47:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53612/fixed/suse-linux-enterprise-server-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53612/",
   "title": "CVE-2026-53612 · util-linux · fixed in SUSE Linux Enterprise Server 16.0 (python-libmount 2.41.1-160000.5.1 and 2 more)",
   "content_text": "Fixed versions: python-libmount 2.41.1-160000.5.1, util-linux 2.41.1-160000.5.1, util-linux-systemd 2.41.1-160000.5.1.",
   "date_published": "2026-10-14T14:47:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53612/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp6",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53612/",
   "title": "CVE-2026-53612 · util-linux · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP6 (util-linux 2.39.3-150600.4.26.1 and 1 more)",
   "content_text": "Fixed versions: util-linux 2.39.3-150600.4.26.1, util-linux-systemd 2.39.3-150600.4.26.1.",
   "date_published": "2026-10-14T14:47:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53612/fixed/suse-linux-enterprise-server-for-sap-applications-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53612/",
   "title": "CVE-2026-53612 · util-linux · fixed in SUSE Linux Enterprise Server for SAP applications 16.0 (python-libmount 2.41.1-160000.5.1 and 2 more)",
   "content_text": "Fixed versions: python-libmount 2.41.1-160000.5.1, util-linux 2.41.1-160000.5.1, util-linux-systemd 2.41.1-160000.5.1.",
   "date_published": "2026-10-14T14:47:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53612/fixed/suse-linux-micro-6.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53612/",
   "title": "CVE-2026-53612 · util-linux · fixed in SUSE Linux Micro 6.0 (util-linux 2.39.3-8.1 and 1 more)",
   "content_text": "Fixed versions: util-linux 2.39.3-8.1, util-linux-systemd 2.39.3-8.1.",
   "date_published": "2026-10-14T14:47:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53612/fixed/suse-linux-micro-6.1",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53612/",
   "title": "CVE-2026-53612 · util-linux · fixed in SUSE Linux Micro 6.1 (util-linux 2.40.4-slfo.1.1_7.1 and 1 more)",
   "content_text": "Fixed versions: util-linux 2.40.4-slfo.1.1_7.1, util-linux-systemd 2.40.4-slfo.1.1_7.1.",
   "date_published": "2026-10-14T14:47:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53612/fixed/suse-linux-micro-6.2",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53612/",
   "title": "CVE-2026-53612 · util-linux · fixed in SUSE Linux Micro 6.2 (util-linux 2.41.1-160000.5.1 and 1 more)",
   "content_text": "Fixed versions: util-linux 2.41.1-160000.5.1, util-linux-systemd 2.41.1-160000.5.1.",
   "date_published": "2026-10-14T14:47:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53612/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53612/",
   "title": "CVE-2026-53612 · util-linux · fixed in Ubuntu 22.04 LTS (util-linux 2.37.2-4ubuntu3.6)",
   "content_text": "Fixed versions: util-linux 2.37.2-4ubuntu3.6.",
   "date_published": "2026-10-14T14:47:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53612/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53612/",
   "title": "CVE-2026-53612 · util-linux · fixed in Ubuntu 24.04 LTS (util-linux 2.39.3-9ubuntu6.6)",
   "content_text": "Fixed versions: util-linux 2.39.3-9ubuntu6.6.",
   "date_published": "2026-10-14T14:47:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-53612/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-53612/",
   "title": "CVE-2026-53612 · util-linux · fixed in Ubuntu 26.04 LTS (util-linux 2.41.3-3ubuntu2.2)",
   "content_text": "Fixed versions: util-linux 2.41.3-3ubuntu2.2.",
   "date_published": "2026-10-14T14:47:25Z"
  }
 ]
}