CVE-2026-78410

Name of the Vulnerable Software and Affected Versions util-linux (affected versions not specified)

Description A flaw exists where restricted bind mounts retrieve the source path from fstab without pinning the source before the privileged mount occurs. This allows a local unprivileged user who can replace the authorized source or a writable ancestor to redirect the SUID mount(8) to bind a different host directory. If the fstab entry includes X-mount.owner, X-mount.group, or X-mount.mode, the root user subsequently changes the ownership or mode on the redirected inode.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.