CVE-2026-76642
High · 7.8CVSS
7.8
EPSS
0.2%
Published
Sep 3, 2026
CISA due date
—
The record
util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-48792 pam_usb provides hardware authentication for Linux using ordinary removable media. CWE-390
- CVE-2026-44310 Gitsign is a keyless Sigstore to signing tool for Git commits with your a GitHub / OIDC… CWE-390
- CVE-2025-0029 Improper handling of error condition during host-induced faults can allow a local… CWE-390
- CVE-2024-30255 Envoy is a cloud-native, open source edge and service proxy. CWE-390