CyberRota Analysis
AI-GeneratedA vulnerability in util-linux allows local unprivileged users to exploit restricted bind mounts by replacing the authorized source path in fstab, potentially redirecting SUID mount operations to bind another directory. This can lead to unauthorized access or modification of files, as root may inadvertently change ownership or permissions on the redirected inode. Organizations using Linux systems, particularly those with untrusted local users, should prioritize patching this vulnerability to mitigate the risk of privilege escalation and unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.