ALPINE-CVE-2026-78410

ALPINE-CVE-2026-78410

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.

CVSS 7.8 · Élevée · Correctif disponible

Publication

2026-09-02T16:17:23.983Z

Mise à jour

2026-10-01T02:17:49.411286998Z

Pile logicielle: system

Vérifiez votre serveur →