ALPINE-CVE-2026-78410

ALPINE-CVE-2026-78410

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.

CVSS 7.8 · Alta · Corrección disponible

Publicación

2026-09-02T16:17:23.983Z

Actualización

2026-10-01T02:17:49.411286998Z

Pila tecnológica: system

Comprueba tu servidor →