CyberRota Analysis
AI-GeneratedUtil-linux versions up to 2.41.5 and 2.42.2 on Linux are vulnerable due to inadequate checks on mount helper exit statuses, enabling unprivileged users to execute privileged operations on existing filesystems. This flaw allows attackers to exploit specific hooks to clone filesystems with inherited suid bits or alter inode permissions, leading to potential privilege escalation. Organizations using affected versions should prioritize patching to mitigate the risk of unauthorized access and privilege escalation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.