CVE-2026-53612 util-linux - Privilege Escalation

util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1 contain a privilege escalation caused by a race condition in the SUID mount utility's hook_owner.c post-mount hook performing path-based chmod() and lchown() operations, letting local low-privileged users with specific /etc/fstab authorization gain root privileges, exploit requires user or users fstab entry with X-mount options.

CVSS base score 7.0 /10
High
CISA KEV
Not listed
Public exploit
None known
Authentication
Required
View the NVD record ↗