Sign In

CVE-2026-76642

ADVISORY - nist

Summary

util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.

EPSS Score⁠: 0.00216 (0.111)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-390⁠

Detection of Error Condition Without Action

ADVISORY - redhat

CWE-390⁠

Detection of Error Condition Without Action

Impacted images

Advisories

Alpine

CREATED

UPDATED

ADVISORY IDCVE-2026-76642⁠
EXPLOITABILITY SCORE

-

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
RATING UNAVAILABLE FROM ADVISORY
PackageTypeOS NameOS VersionAffected RangesFix Versions
alpine/util-linuxapkalpine3.24<2.42.3-r02.42.3-r0
alpine/util-linuxapkalpine3.22<2.41.6-r02.41.6-r0
alpine/util-linuxapkalpineedge<2.42.3-r02.42.3-r0
alpine/util-linuxapkalpine3.23<2.41.6-r02.41.6-r0

Severity and metrics

No CVSS data available from this advisory.

NIST

CREATED

UPDATED

ADVISORY IDCVE-2026-76642⁠
EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CWE-390⁠

CVSS SCORE

8.5high

Debian

CREATED

UPDATED

ADVISORY IDCVE-2026-76642⁠
EXPLOITABILITY SCORE

-

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
RATING UNAVAILABLE FROM ADVISORY

Ubuntu

CREATED

UPDATED

ADVISORY IDCVE-2026-76642⁠
EXPLOITABILITY SCORE

-

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Red Hat

CREATED

UPDATED

ADVISORY IDCVE-2026-76642⁠
EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CWE-390⁠

CVSS SCORE

7.8high

Photon

CREATED

UPDATED

ADVISORY ID

CVE-2026-76642

EXPLOITABILITY SCORE

-

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

7.8high