CVE-2026-53615
util-linux libblkid DOS extended-partition overflow produces invalid partition metadata
CVE-2026-53615 is fixed in 44 products on 1 platform, first by bsdextrautils 2.37.2-4ubuntu3.6, released June 29, 2026. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
8.0
Important
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0018
7th percentile
util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who causes a crafted DOS extended-partition disk image or removable medium to be probed can wrap `cur_start + start` to sector zero and cause libblkid to report a false partition overlapping the MBR. This directly compromises the integrity of the reported partition metadata; disk modification or availability loss requires a separate downstream consumer to act on that metadata. This issue is fixed in 2.41.4.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| bsdextrautils · Ubuntu 22.04.1 LTS (jammy) | 2.37.2-4ubuntu3.6 | bsdextrautils 2.37.2-4ubuntu3.6 | Jun 29, 2026 |
| bsdextrautils · Ubuntu 24.04.5 LTS (noble) | 2.39.3-9ubuntu6.6 | bsdextrautils 2.39.3-9ubuntu6.6 | Jun 29, 2026 |
| bsdextrautils · Ubuntu 26.04.1 LTS (resolute) | 2.41.3-3ubuntu2.2 | bsdextrautils 2.41.3-3ubuntu2.2 | Jun 29, 2026 |
| bsdutils · Ubuntu 22.04.1 LTS (jammy) | 1:2.37.2-4ubuntu3.6 | bsdutils 1:2.37.2-4ubuntu3.6 | Jun 29, 2026 |
| bsdutils · Ubuntu 24.04.5 LTS (noble) | 1:2.39.3-9ubuntu6.6 | bsdutils 1:2.39.3-9ubuntu6.6 | Jun 29, 2026 |
| bsdutils · Ubuntu 26.04.1 LTS (resolute) | 1:2.41.3-3ubuntu2.2 | bsdutils 1:2.41.3-3ubuntu2.2 | Jun 29, 2026 |
| eject · Ubuntu 22.04.1 LTS (jammy) | 2.37.2-4ubuntu3.6 | eject 2.37.2-4ubuntu3.6 | Jun 29, 2026 |
| eject · Ubuntu 24.04.5 LTS (noble) | 2.39.3-9ubuntu6.6 | eject 2.39.3-9ubuntu6.6 | Jun 29, 2026 |
| eject · Ubuntu 26.04.1 LTS (resolute) | 2.41.3-3ubuntu2.2 | eject 2.41.3-3ubuntu2.2 | Jun 29, 2026 |
| fdisk · Ubuntu 22.04.1 LTS (jammy) | 2.37.2-4ubuntu3.6 | fdisk 2.37.2-4ubuntu3.6 | Jun 29, 2026 |
| fdisk · Ubuntu 24.04.5 LTS (noble) | 2.39.3-9ubuntu6.6 | fdisk 2.39.3-9ubuntu6.6 | Jun 29, 2026 |
| fdisk · Ubuntu 26.04.1 LTS (resolute) | 2.41.3-3ubuntu2.2 | fdisk 2.41.3-3ubuntu2.2 | Jun 29, 2026 |
| lastlog2 · Ubuntu 26.04.1 LTS (resolute) | 2.41.3-3ubuntu2.2 | lastlog2 2.41.3-3ubuntu2.2 | Jun 29, 2026 |
| libblkid · almalinux 10 | 2.40.2-18.el10_2.20 | ALSA-2026:93461 | Nov 7, 2026 |
| libblkid · amzn 2023 | 2.37.4-1.amzn2023.0.5 | ALAS2023-2026-1916 | Jul 6, 2026 |
| libblkid · ol 10 | 0:2.40.2-18.0.1.el10_2.20 | ELSA-2026-93461 | Nov 7, 2026 |
| libblkid-debuginfo · amzn 2023 | 2.37.4-1.amzn2023.0.5 | ALAS2023-2026-1916 | Jul 6, 2026 |
| libblkid-devel · almalinux 10 | 2.40.2-18.el10_2.20 | ALSA-2026:93461 | Nov 7, 2026 |
| libblkid-devel · amzn 2023 | 2.37.4-1.amzn2023.0.5 | ALAS2023-2026-1916 | Jul 6, 2026 |
| libblkid-devel · ol 10 | 0:2.40.2-18.0.1.el10_2.20 | ELSA-2026-93461 | Nov 7, 2026 |
| libblkid1 · Ubuntu 22.04.1 LTS (jammy) | 2.37.2-4ubuntu3.6 | libblkid1 2.37.2-4ubuntu3.6 | Jun 29, 2026 |
| libblkid1 · Ubuntu 24.04.5 LTS (noble) | 2.39.3-9ubuntu6.6 | libblkid1 2.39.3-9ubuntu6.6 | Jun 29, 2026 |
| libblkid1 · Ubuntu 26.04.1 LTS (resolute) | 2.41.3-3ubuntu2.2 | libblkid1 2.41.3-3ubuntu2.2 | Jun 29, 2026 |
| libfdisk · almalinux 10 | 2.40.2-18.el10_2.20 | ALSA-2026:93461 | Nov 7, 2026 |
| libfdisk · amzn 2023 | 2.37.4-1.amzn2023.0.5 | ALAS2023-2026-1916 | Jul 6, 2026 |
| libfdisk · ol 10 | 0:2.40.2-18.0.1.el10_2.20 | ELSA-2026-93461 | Nov 7, 2026 |
| libfdisk-debuginfo · amzn 2023 | 2.37.4-1.amzn2023.0.5 | ALAS2023-2026-1916 | Jul 6, 2026 |
| libfdisk-devel · almalinux 10 | 2.40.2-18.el10_2.20 | ALSA-2026:93461 | Nov 7, 2026 |
| libfdisk-devel · amzn 2023 | 2.37.4-1.amzn2023.0.5 | ALAS2023-2026-1916 | Jul 6, 2026 |
| libfdisk-devel · ol 10 | 0:2.40.2-18.0.1.el10_2.20 | ELSA-2026-93461 | Nov 7, 2026 |
| libfdisk1 · Ubuntu 22.04.1 LTS (jammy) | 2.37.2-4ubuntu3.6 | libfdisk1 2.37.2-4ubuntu3.6 | Jun 29, 2026 |
| libfdisk1 · Ubuntu 24.04.5 LTS (noble) | 2.39.3-9ubuntu6.6 | libfdisk1 2.39.3-9ubuntu6.6 | Jun 29, 2026 |
| libfdisk1 · Ubuntu 26.04.1 LTS (resolute) | 2.41.3-3ubuntu2.2 | libfdisk1 2.41.3-3ubuntu2.2 | Jun 29, 2026 |
| liblastlog2-2 · Ubuntu 26.04.1 LTS (resolute) | 2.41.3-3ubuntu2.2 | liblastlog2-2 2.41.3-3ubuntu2.2 | Jun 29, 2026 |
| libmount · almalinux 10 | 2.40.2-18.el10_2.20 | ALSA-2026:93461 | Nov 7, 2026 |
| libmount · amzn 2023 | 2.37.4-1.amzn2023.0.5 | ALAS2023-2026-1916 | Jul 6, 2026 |
| libmount · ol 10 | 0:2.40.2-18.0.1.el10_2.20 | ELSA-2026-93461 | Nov 7, 2026 |
| libmount-debuginfo · amzn 2023 | 2.37.4-1.amzn2023.0.5 | ALAS2023-2026-1916 | Jul 6, 2026 |
| libmount-devel · almalinux 10 | 2.40.2-18.el10_2.20 | ALSA-2026:93461 | Nov 7, 2026 |
| libmount-devel · amzn 2023 | 2.37.4-1.amzn2023.0.5 | ALAS2023-2026-1916 | Jul 6, 2026 |
| libmount-devel · ol 10 | 0:2.40.2-18.0.1.el10_2.20 | ELSA-2026-93461 | Nov 7, 2026 |
| libmount1 · Ubuntu 22.04.1 LTS (jammy) | 2.37.2-4ubuntu3.6 | libmount1 2.37.2-4ubuntu3.6 | Jun 29, 2026 |
| libmount1 · Ubuntu 24.04.5 LTS (noble) | 2.39.3-9ubuntu6.6 | libmount1 2.39.3-9ubuntu6.6 | Jun 29, 2026 |
| libmount1 · Ubuntu 26.04.1 LTS (resolute) | 2.41.3-3ubuntu2.2 | libmount1 2.41.3-3ubuntu2.2 | Jun 29, 2026 |
| libpam-lastlog2 · Ubuntu 26.04.1 LTS (resolute) | 2.41.3-3ubuntu2.2 | libpam-lastlog2 2.41.3-3ubuntu2.2 | Jun 29, 2026 |
| libsmartcols · almalinux 10 | 2.40.2-18.el10_2.20 | ALSA-2026:93461 | Nov 7, 2026 |
| libsmartcols · amzn 2023 | 2.37.4-1.amzn2023.0.5 | ALAS2023-2026-1916 | Jul 6, 2026 |
| libsmartcols · ol 10 | 0:2.40.2-18.0.1.el10_2.20 | ELSA-2026-93461 | Nov 7, 2026 |
| libsmartcols-debuginfo · amzn 2023 | 2.37.4-1.amzn2023.0.5 | ALAS2023-2026-1916 | Jul 6, 2026 |
| libsmartcols-devel · almalinux 10 | 2.40.2-18.el10_2.20 | ALSA-2026:93461 | Nov 7, 2026 |
| libsmartcols-devel · amzn 2023 | 2.37.4-1.amzn2023.0.5 | ALAS2023-2026-1916 | Jul 6, 2026 |
| libsmartcols-devel · ol 10 | 0:2.40.2-18.0.1.el10_2.20 | ELSA-2026-93461 | Nov 7, 2026 |
| libsmartcols1 · Ubuntu 22.04.1 LTS (jammy) | 2.37.2-4ubuntu3.6 | libsmartcols1 2.37.2-4ubuntu3.6 | Jun 29, 2026 |
| libsmartcols1 · Ubuntu 24.04.5 LTS (noble) | 2.39.3-9ubuntu6.6 | libsmartcols1 2.39.3-9ubuntu6.6 | Jun 29, 2026 |
| libsmartcols1 · Ubuntu 26.04.1 LTS (resolute) | 2.41.3-3ubuntu2.2 | libsmartcols1 2.41.3-3ubuntu2.2 | Jun 29, 2026 |
| libuuid · almalinux 10 | 2.40.2-18.el10_2.20 | ALSA-2026:93461 | Nov 7, 2026 |
| libuuid · amzn 2023 | 2.37.4-1.amzn2023.0.5 | ALAS2023-2026-1916 | Jul 6, 2026 |
| libuuid · ol 10 | 0:2.40.2-18.0.1.el10_2.20 | ELSA-2026-93461 | Nov 7, 2026 |
| libuuid-debuginfo · amzn 2023 | 2.37.4-1.amzn2023.0.5 | ALAS2023-2026-1916 | Jul 6, 2026 |
| libuuid-devel · almalinux 10 | 2.40.2-18.el10_2.20 | ALSA-2026:93461 | Nov 7, 2026 |
| libuuid-devel · amzn 2023 | 2.37.4-1.amzn2023.0.5 | ALAS2023-2026-1916 | Jul 6, 2026 |
| libuuid-devel · ol 10 | 0:2.40.2-18.0.1.el10_2.20 | ELSA-2026-93461 | Nov 7, 2026 |
| libuuid1 · Ubuntu 22.04.1 LTS (jammy) | 2.37.2-4ubuntu3.6 | libuuid1 2.37.2-4ubuntu3.6 | Jun 29, 2026 |
| libuuid1 · Ubuntu 24.04.5 LTS (noble) | 2.39.3-9ubuntu6.6 | libuuid1 2.39.3-9ubuntu6.6 | Jun 29, 2026 |
| libuuid1 · Ubuntu 26.04.1 LTS (resolute) | 2.41.3-3ubuntu2.2 | libuuid1 2.41.3-3ubuntu2.2 | Jun 29, 2026 |
| login · Ubuntu 26.04.1 LTS (resolute) | 1:4.16.0-2+really2.41.3-3ubuntu2.2 | login 1:4.16.0-2+really2.41.3-3ubuntu2.2 | Jun 29, 2026 |
| mount · Ubuntu 22.04.1 LTS (jammy) | 2.37.2-4ubuntu3.6 | mount 2.37.2-4ubuntu3.6 | Jun 29, 2026 |
| mount · Ubuntu 24.04.5 LTS (noble) | 2.39.3-9ubuntu6.6 | mount 2.39.3-9ubuntu6.6 | Jun 29, 2026 |
| mount · Ubuntu 26.04.1 LTS (resolute) | 2.41.3-3ubuntu2.2 | mount 2.41.3-3ubuntu2.2 | Jun 29, 2026 |
| python3-libmount · almalinux 10 | 2.40.2-18.el10_2.20 | ALSA-2026:93461 | Nov 7, 2026 |
| python3-libmount · amzn 2023 | 2.37.4-1.amzn2023.0.5 | ALAS2023-2026-1916 | Jul 6, 2026 |
| python3-libmount · ol 10 | 0:2.40.2-18.0.1.el10_2.20 | ELSA-2026-93461 | Nov 7, 2026 |
| python3-libmount-debuginfo · amzn 2023 | 2.37.4-1.amzn2023.0.5 | ALAS2023-2026-1916 | Jul 6, 2026 |
| rfkill · Ubuntu 22.04.1 LTS (jammy) | 2.37.2-4ubuntu3.6 | rfkill 2.37.2-4ubuntu3.6 | Jun 29, 2026 |
| rfkill · Ubuntu 24.04.5 LTS (noble) | 2.39.3-9ubuntu6.6 | rfkill 2.39.3-9ubuntu6.6 | Jun 29, 2026 |
| rfkill · Ubuntu 26.04.1 LTS (resolute) | 2.41.3-3ubuntu2.2 | rfkill 2.41.3-3ubuntu2.2 | Jun 29, 2026 |
| util-linux · Debian 13.5 (trixie) | 2.41.5-0+deb13u1 | DEBIAN-CVE-2026-53615 | Aug 16, 2026 |
| util-linux · Debian 14 | 2.42-1 | DEBIAN-CVE-2026-53615 | Aug 16, 2026 |
| util-linux · RHEL 10 | 2.40.2-18.el10_2.20 | RHSA-2026:93461 | Sep 2, 2026 |
| util-linux · Ubuntu 22.04.1 LTS (jammy) | 2.37.2-4ubuntu3.6 | util-linux 2.37.2-4ubuntu3.6 | Jun 29, 2026 |
| util-linux · Ubuntu 24.04.5 LTS (noble) | 2.39.3-9ubuntu6.6 | util-linux 2.39.3-9ubuntu6.6 | Jun 29, 2026 |
| util-linux · Ubuntu 26.04.1 LTS (resolute) | 2.41.3-3ubuntu2.2 | util-linux 2.41.3-3ubuntu2.2 | Jun 29, 2026 |
| util-linux · almalinux 10 | 2.40.2-18.el10_2.20 | ALSA-2026:93461 | Nov 7, 2026 |
| util-linux · amzn 2023 | 2.37.4-1.amzn2023.0.5 | ALAS2023-2026-1916 | Jul 6, 2026 |
| util-linux · ol 10 | 0:2.40.2-18.0.1.el10_2.20 | ELSA-2026-93461 | Nov 7, 2026 |
| util-linux · rocky 10 | 0:2.40.2-18.el10_2.20 | RLSA-2026:93461 | Nov 7, 2026 |
| util-linux-core · almalinux 10 | 2.40.2-18.el10_2.20 | ALSA-2026:93461 | Nov 7, 2026 |
| util-linux-core · amzn 2023 | 2.37.4-1.amzn2023.0.5 | ALAS2023-2026-1916 | Jul 6, 2026 |
| util-linux-core · ol 10 | 0:2.40.2-18.0.1.el10_2.20 | ELSA-2026-93461 | Nov 7, 2026 |
| util-linux-core-debuginfo · amzn 2023 | 2.37.4-1.amzn2023.0.5 | ALAS2023-2026-1916 | Jul 6, 2026 |
| util-linux-debuginfo · amzn 2023 | 2.37.4-1.amzn2023.0.5 | ALAS2023-2026-1916 | Jul 6, 2026 |
| util-linux-debugsource · amzn 2023 | 2.37.4-1.amzn2023.0.5 | ALAS2023-2026-1916 | Jul 6, 2026 |
| util-linux-extra · Ubuntu 24.04.5 LTS (noble) | 2.39.3-9ubuntu6.6 | util-linux-extra 2.39.3-9ubuntu6.6 | Jun 29, 2026 |
| util-linux-extra · Ubuntu 26.04.1 LTS (resolute) | 2.41.3-3ubuntu2.2 | util-linux-extra 2.41.3-3ubuntu2.2 | Jun 29, 2026 |
| util-linux-locales · Ubuntu 22.04.1 LTS (jammy) | 2.37.2-4ubuntu3.6 | util-linux-locales 2.37.2-4ubuntu3.6 | Jun 29, 2026 |
| util-linux-locales · Ubuntu 24.04.5 LTS (noble) | 2.39.3-9ubuntu6.6 | util-linux-locales 2.39.3-9ubuntu6.6 | Jun 29, 2026 |
| util-linux-locales · Ubuntu 26.04.1 LTS (resolute) | 2.41.3-3ubuntu2.2 | util-linux-locales 2.41.3-3ubuntu2.2 | Jun 29, 2026 |
| util-linux-user · amzn 2023 | 2.37.4-1.amzn2023.0.5 | ALAS2023-2026-1916 | Jul 6, 2026 |
| util-linux-user-debuginfo · amzn 2023 | 2.37.4-1.amzn2023.0.5 | ALAS2023-2026-1916 | Jul 6, 2026 |
| uuid-runtime · Ubuntu 22.04.1 LTS (jammy) | 2.37.2-4ubuntu3.6 | uuid-runtime 2.37.2-4ubuntu3.6 | Jun 29, 2026 |
| uuid-runtime · Ubuntu 24.04.5 LTS (noble) | 2.39.3-9ubuntu6.6 | uuid-runtime 2.39.3-9ubuntu6.6 | Jun 29, 2026 |
| uuid-runtime · Ubuntu 26.04.1 LTS (resolute) | 2.41.3-3ubuntu2.2 | uuid-runtime 2.41.3-3ubuntu2.2 | Jun 29, 2026 |
| uuidd · almalinux 10 | 2.40.2-18.el10_2.20 | ALSA-2026:93461 | Nov 7, 2026 |
| uuidd · amzn 2023 | 2.37.4-1.amzn2023.0.5 | ALAS2023-2026-1916 | Jul 6, 2026 |
| uuidd · ol 10 | 0:2.40.2-18.0.1.el10_2.20 | ELSA-2026-93461 | Nov 7, 2026 |
| uuidd-debuginfo · amzn 2023 | 2.37.4-1.amzn2023.0.5 | ALAS2023-2026-1916 | Jul 6, 2026 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.