CVE-2021-3995
Medium
Description
A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows an unprivileged local attacker to unmount FUSE filesystems that belong to certain other users who have a UID that is a prefix of the UID of the attacker in its string form. An attacker may use this flaw to cause a denial of service to applications that use the affected filesystems.
SeverityMedium
CVSS5.5
Exploit probability—
Product
Kernel Util-linux
PublishedAug 23, 2022
First seenAug 23, 2022
Weakness typeCWE-552CWE-552
How to fix
Update
- kernel util-linux2.37.3 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kernel util-linux | 2.34 ≤ v < 2.37.3 | 2.37.3 |
| fedoraproject fedora | 35 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.