CVE-2026-76642

Name of the Vulnerable Software and Affected Versions util-linux versions prior to 2.41.6 util-linux version 2.42.2

Description The software fails to verify the exit status of mount helpers before executing post-mount hooks. This allows unprivileged users to perform privileged operations on existing filesystems. An attacker can leverage X-mount.idmap or X-mount.owner hooks to clone filesystems while inheriting suid bits or modify target inode permissions following a helper failure, leading to privilege escalation.

Recommendations Update util-linux to a version later than 2.41.5. Update util-linux to a version later than 2.42.2.