Skip to content

Kernel · product

Util-Linux

7 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

  1. wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequ…CVE-2024-28085Kernel · CVSS 3.3 · 2.2% likely

    CWE-150

  2. An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in…CVE-2021-37600Kernel · 0.7% likely

    CWE-190

  3. A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows a local user on a vul…CVE-2021-3996Kernel · CVSS 5.5 · 0.6% likely

    CWE-552

  4. A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows an unprivileged local…CVE-2021-3995Kernel · 0.6% likely

    CWE-552

  5. An issue was discovered in hwclock.13-v2.27 allows attackers to gain escalated privlidges or execute arbitrary commands via the path parameter when setting the date.CVE-2020-21583Kernel · 0.5% likely

    CWE-78

  6. A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the li…CVE-2022-0563Kernel · CVSS 5.5 · 0.4% likely

    CWE-209

  7. In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands in a mountpoint name, which is mishandled during a umount c…CVE-2018-7738Kernel · 0.4% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in