{"schema_version":1,"title":"Util-Linux vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 7 vulnerabilities in Util-Linux: 0 in the last 7 days and 4 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-53615, was published on 14 October 2026. 3 vulnerabilities in the last four weeks, up from none in the four before. 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/util-linux","json_url":"https://junglewise.ai/threats/vendors/util-linux.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/util-linux","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":false,"counts":{"high":4,"all_time":7,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":3,"last_90_days":4,"last_365_days":7},"latest":[{"cve":"CVE-2026-53615","cvss":8,"epss":0.0018,"slug":"cve-2026-53615-util-linux-is-a-random-collection-of-linux-utilities-before-util","title":"util-linux integer overflow in DOS partition parsing","severity":"high","exploited":false,"published_at":"2026-10-14T16:17:46.07+00:00","url":"https://junglewise.ai/threats/cve-2026-53615-util-linux-is-a-random-collection-of-linux-utilities-before-util"},{"cve":"CVE-2026-53614","cvss":7,"epss":0.0014,"slug":"cve-2026-53614-util-linux-is-a-random-collection-of-linux-utilities-in-util","title":"util-linux mount SUID privilege escalation via LIBMOUNT_FORCE_MOUNT2","severity":"high","exploited":false,"published_at":"2026-10-14T16:17:45.93+00:00","url":"https://junglewise.ai/threats/cve-2026-53614-util-linux-is-a-random-collection-of-linux-utilities-in-util"},{"cve":"CVE-2026-53613","cvss":7,"epss":0.0013,"slug":"cve-2026-53613-util-linux-is-a-random-collection-of-linux-utilities-in-util","title":"util-linux mount TOCTOU privilege escalation via renameat2","severity":"high","exploited":false,"published_at":"2026-10-14T15:17:20.41+00:00","url":"https://junglewise.ai/threats/cve-2026-53613-util-linux-is-a-random-collection-of-linux-utilities-in-util"},{"cve":"CVE-2026-78408","cvss":7.9,"epss":0.0017,"slug":"cve-2026-78408-nsenter-join-cgroup-privilege-escalation-via-open-file-descriptor","title":"nsenter --join-cgroup privilege escalation via open file descriptor","severity":"high","exploited":false,"published_at":"2026-09-02T16:17:23.687+00:00","url":"https://junglewise.ai/threats/cve-2026-78408-nsenter-join-cgroup-privilege-escalation-via-open-file-descriptor"},{"cve":"CVE-2026-13595","cvss":6.8,"slug":"cve-2026-13595-util-linux-libblkid-heap-use-after-free-in-nested-partition","title":"util-linux libblkid heap use-after-free in nested partition probing","severity":"medium","exploited":false,"published_at":"2026-06-29T09:16:28.303+00:00","url":"https://junglewise.ai/threats/cve-2026-13595-util-linux-libblkid-heap-use-after-free-in-nested-partition"},{"cve":"CVE-2026-27456","cvss":4.7,"epss":0.0012,"slug":"cve-2026-27456-util-linux-mount-toctou-race-condition-in-loop-device-setup","title":"util-linux mount TOCTOU race condition in loop device setup","severity":"medium","exploited":false,"published_at":"2026-04-03T22:16:25.4+00:00","url":"https://junglewise.ai/threats/cve-2026-27456-util-linux-mount-toctou-race-condition-in-loop-device-setup"},{"cve":"CVE-2025-14104","cvss":6.1,"epss":0.0018,"slug":"cve-2025-14104-util-linux-heap-buffer-overread-in-setpwnam-function","title":"util-linux heap buffer overread in setpwnam function","severity":"medium","exploited":false,"published_at":"2025-12-05T17:16:03.117+00:00","url":"https://junglewise.ai/threats/cve-2025-14104-util-linux-heap-buffer-overread-in-setpwnam-function"}],"vendor":{"hub":true,"name":"Util-Linux","slug":"util-linux","description":"Utility suite for Linux systems providing core command-line tools for file and system management.","url":"https://junglewise.ai/threats/vendors/util-linux"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-53615","cvss":8,"epss":0.0018,"slug":"cve-2026-53615-util-linux-is-a-random-collection-of-linux-utilities-before-util","title":"util-linux integer overflow in DOS partition parsing","severity":"high","exploited":false,"published_at":"2026-10-14T16:17:46.07+00:00","url":"https://junglewise.ai/threats/cve-2026-53615-util-linux-is-a-random-collection-of-linux-utilities-before-util"},{"cve":"CVE-2026-78408","cvss":7.9,"epss":0.0017,"slug":"cve-2026-78408-nsenter-join-cgroup-privilege-escalation-via-open-file-descriptor","title":"nsenter --join-cgroup privilege escalation via open file descriptor","severity":"high","exploited":false,"published_at":"2026-09-02T16:17:23.687+00:00","url":"https://junglewise.ai/threats/cve-2026-78408-nsenter-join-cgroup-privilege-escalation-via-open-file-descriptor"},{"cve":"CVE-2026-53614","cvss":7,"epss":0.0014,"slug":"cve-2026-53614-util-linux-is-a-random-collection-of-linux-utilities-in-util","title":"util-linux mount SUID privilege escalation via LIBMOUNT_FORCE_MOUNT2","severity":"high","exploited":false,"published_at":"2026-10-14T16:17:45.93+00:00","url":"https://junglewise.ai/threats/cve-2026-53614-util-linux-is-a-random-collection-of-linux-utilities-in-util"},{"cve":"CVE-2026-53613","cvss":7,"epss":0.0013,"slug":"cve-2026-53613-util-linux-is-a-random-collection-of-linux-utilities-in-util","title":"util-linux mount TOCTOU privilege escalation via renameat2","severity":"high","exploited":false,"published_at":"2026-10-14T15:17:20.41+00:00","url":"https://junglewise.ai/threats/cve-2026-53613-util-linux-is-a-random-collection-of-linux-utilities-in-util"},{"cve":"CVE-2026-13595","cvss":6.8,"slug":"cve-2026-13595-util-linux-libblkid-heap-use-after-free-in-nested-partition","title":"util-linux libblkid heap use-after-free in nested partition probing","severity":"medium","exploited":false,"published_at":"2026-06-29T09:16:28.303+00:00","url":"https://junglewise.ai/threats/cve-2026-13595-util-linux-libblkid-heap-use-after-free-in-nested-partition"},{"cve":"CVE-2025-14104","cvss":6.1,"epss":0.0018,"slug":"cve-2025-14104-util-linux-heap-buffer-overread-in-setpwnam-function","title":"util-linux heap buffer overread in setpwnam function","severity":"medium","exploited":false,"published_at":"2025-12-05T17:16:03.117+00:00","url":"https://junglewise.ai/threats/cve-2025-14104-util-linux-heap-buffer-overread-in-setpwnam-function"},{"cve":"CVE-2026-27456","cvss":4.7,"epss":0.0012,"slug":"cve-2026-27456-util-linux-mount-toctou-race-condition-in-loop-device-setup","title":"util-linux mount TOCTOU race condition in loop device setup","severity":"medium","exploited":false,"published_at":"2026-04-03T22:16:25.4+00:00","url":"https://junglewise.ai/threats/cve-2026-27456-util-linux-mount-toctou-race-condition-in-loop-device-setup"}],"generated_at":"2026-11-09T03:07:00.176479+00:00","technologies":[{"name":"Util-Linux","slug":"util-linux-util-linux","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/util-linux-util-linux"}]}