Ubuntu 26.04 LTS util-linux Important Sensitivity Issues USN-8702

Find practical guidance for preventing, investigating, and responding to Linux security problems. Find practical guidance for preventing, investigating, and responding to Linux security problems. _ Review Linux Privileges ×

Several security issues were fixed in util-linux. Software Description: - util-linux: miscellaneous system utilities Details: It was discovered that libblkid in util-linux had a heap use-after-free vulnerability during nested partition probing. An attacker who could present a crafted block device image could possibly use this issue to obtain sensitive information or cause a denial of service. (CVE-2026-13595) It was discovered that the mount utility in util-linux had a time-of-check- time-of-use vulnerability when setting up loop devices. A local attacker could possibly use this issue to obtain unauthorized read access to root- protected files and block devices. (CVE-2026-27456) It was discovered that the login utility in util-linux improperly canonicalized hostnames when invoked with the -h option. A remote attacker could possibly use this issue to bypass host-based access control rules. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-3184) It was discovered that libmou... Read the Full Advisory

Several security issues were fixed in util-linux.

Software Description:

- util-linux: miscellaneous system utilities

It was discovered that libblkid in util-linux had a heap use-after-free

vulnerability during nested partition probing. An attacker who could

present a crafted block device image could possibly use this issue to

obtain sensitive information or cause a denial of service. (CVE-2026-13595)

It was discovered that the mount utility in util-linux had a time-of-check-

time-of-use vulnerability when setting up loop devices. A local attacker

could possibly use this issue to obtain unauthorized read access to root-

protected files and block devices. (CVE-2026-27456)

It was discovered that the login utility in util-linux improperly

canonicalized hostnames when invoked with the -h option. A remote attacker

could possibly use this issue to bypass host-based access control rules.

This issue only affected Ubuntu 26.04 LTS. (CVE-2026-3184)

It was discovered that libmou...

The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS util-linux 2.41.3-3ubuntu2.2 Ubuntu 24.04 LTS util-linux 2.39.3-9ubuntu6.6 Ubuntu 22.04 LTS util-linux 2.37.2-4ubuntu3.6 In general, a standard system update will make all the necessary changes.

CVE-2026-13595, CVE-2026-27456, CVE-2026-3184, CVE-2026-53612,

CVE-2026-53613, CVE-2026-53614, CVE-2026-53615

Ubuntu Security Notice USN-8702-1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases