Description
mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs.
References (34)
... and 14 more
Scores
EPSS
0.0010
EPSS Percentile
26.6%
Details
CWE
CWE-252
Status
published
Products (7)
canonical/ubuntu_linux
6.06
canonical/ubuntu_linux
6.10
canonical/ubuntu_linux
7.04
debian/debian_linux
3.1
fedoraproject/fedora
7
kernel/util-linux
< 2.13.1.1
loop-aes-utils_project/loop-aes-utils
Published
Oct 04, 2007
Tracked Since
Feb 18, 2026