CVE-2026-78410

The record

A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.

Affected packages

Related vulnerabilities

• CVE-2026-49114 In ONNX before 1.21.0, the 'save_external_data' function builds the external-data file… CWE-367
• CVE-2026-58041 A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through… CWE-367
• CVE-2026-18477 A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X'… CWE-367
• CVE-2026-56822 Netty is an asynchronous, event-driven network application framework. CWE-367
• CVE-2026-56648 Time-of-check time-of-use (toctou) race condition in Windows Network File System allows… CWE-367
• CVE-2026-50673 Null pointer dereference in Windows Kernel allows an authorized attacker to elevate… CWE-367
• CVE-2026-54370 acl before version 2.4.0 contains a time-of-check to time-of-use (TOCTOU) race condition… CWE-367
• CVE-2026-54353 Budibase is an open-source low-code platform. CWE-367