# CVE-2018-7738: bsdutils: In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell comman...

CVE-2018-7738 is fixed in 13 products on 1 platform, first by bsdutils 1:2.31.1-0.4ubuntu3.7, released March 6, 2018. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2018-7738
- Priority: Routine
- CVSS: n/a (Negligible)
- EPSS: 0.0043
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Mar 6, 2018

## Description

In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands in a mountpoint name, which is mishandled during a umount command (within Bash) by a different user, as demonstrated by logging in as root and entering umount followed by a tab character for autocompletion.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | bsdutils Ubuntu 18.04.6 LTS (bionic) | 1:2.31.1-0.4ubuntu3.7 | [bsdutils 1:2.31.1-0.4ubuntu3.7](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-bsdutils-1-2.31.1-0.4ubuntu3.7.md) | Mar 6, 2018 |
| Linux | fdisk Ubuntu 18.04.6 LTS (bionic) | 2.31.1-0.4ubuntu3.7 | [fdisk 2.31.1-0.4ubuntu3.7](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-fdisk-2.31.1-0.4ubuntu3.7.md) | Mar 6, 2018 |
| Linux | libblkid1 Ubuntu 18.04.6 LTS (bionic) | 2.31.1-0.4ubuntu3.7 | [libblkid1 2.31.1-0.4ubuntu3.7](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libblkid1-2.31.1-0.4ubuntu3.7.md) | Mar 6, 2018 |
| Linux | libfdisk1 Ubuntu 18.04.6 LTS (bionic) | 2.31.1-0.4ubuntu3.7 | [libfdisk1 2.31.1-0.4ubuntu3.7](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libfdisk1-2.31.1-0.4ubuntu3.7.md) | Mar 6, 2018 |
| Linux | libmount1 Ubuntu 18.04.6 LTS (bionic) | 2.31.1-0.4ubuntu3.7 | [libmount1 2.31.1-0.4ubuntu3.7](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libmount1-2.31.1-0.4ubuntu3.7.md) | Mar 6, 2018 |
| Linux | libsmartcols1 Ubuntu 18.04.6 LTS (bionic) | 2.31.1-0.4ubuntu3.7 | [libsmartcols1 2.31.1-0.4ubuntu3.7](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libsmartcols1-2.31.1-0.4ubuntu3.7.md) | Mar 6, 2018 |
| Linux | libuuid1 Ubuntu 18.04.6 LTS (bionic) | 2.31.1-0.4ubuntu3.7 | [libuuid1 2.31.1-0.4ubuntu3.7](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libuuid1-2.31.1-0.4ubuntu3.7.md) | Mar 6, 2018 |
| Linux | mount Ubuntu 18.04.6 LTS (bionic) | 2.31.1-0.4ubuntu3.7 | [mount 2.31.1-0.4ubuntu3.7](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-mount-2.31.1-0.4ubuntu3.7.md) | Mar 6, 2018 |
| Linux | rfkill Ubuntu 18.04.6 LTS (bionic) | 2.31.1-0.4ubuntu3.7 | [rfkill 2.31.1-0.4ubuntu3.7](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-rfkill-2.31.1-0.4ubuntu3.7.md) | Mar 6, 2018 |
| Linux | setpriv Ubuntu 18.04.6 LTS (bionic) | 2.31.1-0.4ubuntu3.7 | [setpriv 2.31.1-0.4ubuntu3.7](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-setpriv-2.31.1-0.4ubuntu3.7.md) | Mar 6, 2018 |
| Linux | util-linux Ubuntu 18.04.6 LTS (bionic) | 2.31.1-0.4ubuntu3.7 | [util-linux 2.31.1-0.4ubuntu3.7](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-util-linux-2.31.1-0.4ubuntu3.7.md) | Mar 6, 2018 |
| Linux | util-linux-locales Ubuntu 18.04.6 LTS (bionic) | 2.31.1-0.4ubuntu3.7 | [util-linux-locales 2.31.1-0.4ubuntu3.7](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-util-linux-locales-2.31.1-0.4ubuntu3.7.md) | Mar 6, 2018 |
| Linux | uuid-runtime Ubuntu 18.04.6 LTS (bionic) | 2.31.1-0.4ubuntu3.7 | [uuid-runtime 2.31.1-0.4ubuntu3.7](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-uuid-runtime-2.31.1-0.4ubuntu3.7.md) | Mar 6, 2018 |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo