Threats Tagged 'cve-2026-78409'

Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, addressing multiple vulnerabilities in util-linux packages. The update includes fixes for CVE-2026-76642, CVE-2026-78408, CVE-2026-78409, and CVE-2026-78410. These vulnerabilities affect various util-linux components such as libblkid, libfdisk, liblastlog2, libmount, libsmartcols, libuuid, python3-libmount, and related packages on aarch64 and x86_64 architectures. The advisory provides updated RPM packages to remediate these issues. No exploits are known to be active in the wild at this time.

CVE-2026-78409 is a vulnerability in Red Hat Hardened Images involving improper link resolution before file access. The issue arises because the X-mount.subdir option uses a detached-tree fast path on Linux 6.15+ and passes a subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW, which does not prevent intermediate symlink traversal. This allows a local unprivileged user with an authorized fstab X-mount.subdir entry to attach a host path at the intended mountpoint. A security update addressing this vulnerability is available from Red Hat.

Multiple security vulnerabilities in the util-linux package's mount(8) utility allow local unprivileged users to potentially escalate privileges to root. These include a TOCTOU race condition on mounting user-configured paths, improper sanitization of an environment variable enabling legacy mount code path usage, and insecure handling of restricted bind mounts. A fix is available for these issues.