https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:36:39 +0000 https://vulnerability.circl.lu/vuln/bell-cve-2026-78408 <p><strong>Affected:</strong> Alpaquita:25: util-linux, Alpaquita:stream: util-linux, BellSoft Hardened Containers:25: util-linux, BellSoft Hardened Containers:stream: util-linux</p> <p><strong>Affected:</strong> Alpaquita:25: util-linux, Alpaquita:stream: util-linux, BellSoft Hardened Containers:25: util-linux, BellSoft Hardened Containers:stream: util-linux</p> https://vulnerability.circl.lu/vuln/bell-cve-2026-78408 https://vulnerability.circl.lu/vuln/fkie_cve-2026-78408 <p>The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root&#39;s ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.</p> <p>The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root&#39;s ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-78408 https://vulnerability.circl.lu/vuln/gcve-1988-2026-0386 <p><strong>Affected:</strong> unknown util-linux SSA:2026-249-03</p> <p>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] util-linux (SSA:2026-249-03) New util-linux packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: +--------------------------+ patches/packages/util-linux-2.42.3-i586-1_slack15.0.txz: Upgraded. This update fixes bugs and security issues. For more information, see: https://www.cve.org/CVERecord?id=CVE-2026-76642 https://www.cve.org/CVERecord?id=CVE-2026-78410 https://www.cve.org/CVERecord?id=CVE-2026-78409 https://www.cve.org/CVERecord?id=CVE-2026-78408 https://www.cve.org/CVERecord?id=CVE-2024-28085 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (http://osuosl.org) for donating FTP and rsync hosting to the Slackware project! :-) Also see the &#34;Get Slack&#34; section on http://slackware.com for additional mirror sites near you. Updated package for Slackware 15.0: ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/util-linux-2.42.3-i586-1_slack15.0.txz Updated package for Slackware x86_64 15.0: ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/util-linux-2.42.3-x86_64-1_slack15.0.txz Updated package for Slackware -current: ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/a/util-linux-2.42.3-i686-1.txz Updated package for Slackware x86_64 -current: ftp://ftp.…</p> <p><strong>Affected:</strong> unknown util-linux SSA:2026-249-03</p> <p>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] util-linux (SSA:2026-249-03) New util-linux packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: +--------------------------+ patches/packages/util-linux-2.42.3-i586-1_slack15.0.txz: Upgraded. This update fixes bugs and security issues. For more information, see: https://www.cve.org/CVERecord?id=CVE-2026-76642 https://www.cve.org/CVERecord?id=CVE-2026-78410 https://www.cve.org/CVERecord?id=CVE-2026-78409 https://www.cve.org/CVERecord?id=CVE-2026-78408 https://www.cve.org/CVERecord?id=CVE-2024-28085 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (http://osuosl.org) for donating FTP and rsync hosting to the Slackware project! :-) Also see the &#34;Get Slack&#34; section on http://slackware.com for additional mirror sites near you. Updated package for Slackware 15.0: ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/util-linux-2.42.3-i586-1_slack15.0.txz Updated package for Slackware x86_64 15.0: ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/util-linux-2.42.3-x86_64-1_slack15.0.txz Updated package for Slackware -current: ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/a/util-linux-2.42.3-i686-1.txz Updated package for Slackware x86_64 -current: ftp://ftp.…</p> https://vulnerability.circl.lu/vuln/gcve-1988-2026-0386 https://vulnerability.circl.lu/vuln/msrc_cve-2026-78408 msrc_CVE-2026-78408 https://vulnerability.circl.lu/vuln/msrc_cve-2026-78408 https://vulnerability.circl.lu/vuln/opensuse-su-2026:11870-1 <p>libblkid-devel-2.42.3-1.1 on GA media</p> <p>libblkid-devel-2.42.3-1.1 on GA media</p> https://vulnerability.circl.lu/vuln/opensuse-su-2026:11870-1 https://vulnerability.circl.lu/vuln/rhsa-2026:63162 <p>util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection</p> <p>util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection</p> https://vulnerability.circl.lu/vuln/rhsa-2026:63162 https://vulnerability.circl.lu/vuln/suse-su-2026:23861-1 <p>Security update for util-linux</p> <p>Security update for util-linux</p> https://vulnerability.circl.lu/vuln/suse-su-2026:23861-1 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-78408 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: util-linux, Ubuntu:Pro:16.04:LTS: util-linux, Ubuntu:18.04:LTS: util-linux, Ubuntu:Pro:20.04:LTS: util-linux, Ubuntu:22.04:LTS: util-linux, Ubuntu:24.04:LTS: util-linux, Ubuntu:26.04:LTS: util-linux</p> <p>The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root&#39;s ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: util-linux, Ubuntu:Pro:16.04:LTS: util-linux, Ubuntu:18.04:LTS: util-linux, Ubuntu:Pro:20.04:LTS: util-linux, Ubuntu:22.04:LTS: util-linux, Ubuntu:24.04:LTS: util-linux, Ubuntu:26.04:LTS: util-linux</p> <p>The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root&#39;s ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-78408