These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A local attacker can cause libblkid in util-linux to report false partition metadata by crafting a DOS extended-partition disk image or removable medium, leading to potential integrity issues with reported partition metadata. This vulnerability allows an attacker to wrap `cur_start + start` to sector zero, causing libblkid to report a false partition overlapping the MBR, which directly compromises the int [truncated]
A local low-privileged user can exploit a vulnerability in util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1 to potentially gain root privileges by bypassing nosuid and noexec security flags on a bind mount. The SUID 'mount' utility in util-linux reads the attacker-controlled LIBMOUNT_FORCE_MOUNT2 environment variable with getenv(), allowing a local low-privileged user to force the non-atomic legac [truncated]
A local low-privileged user can exploit a TOCTOU vulnerability in util-linux to gain root privileges by swapping a path component and redirecting an authorized mount to a root-owned location, potentially leading to unauthorized access, disruption of system services, and other security consequences. The vulnerability exists in util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the l [truncated]
A local low-privileged user can exploit a TOCTOU vulnerability in the util-linux mount utility to potentially gain root privileges. The issue is fixed in versions 2.41.5 and 2.42.2. This vulnerability is particularly concerning because it allows for local privilege escalation, which can be used to gain unauthorized access to sensitive systems and data. The vulnerability is caused by a race condition in th [truncated]
A Time-of-Check-Time-of-Use (TOCTOU) vulnerability was identified in the SUID binary /usr/bin/mount from util-linux prior to version 2.41.4. This issue allows a local unprivileged user to replace the source file with a symlink pointing to any root-owned file or device during the race window, causing the SUID binary to open and mount it as root. Exploitation requires an /etc/fstab entry with user,loop opti [truncated]