# CVE-2022-0563: libblkid: Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-0563: A flaw wa... CVE-2022-0563 is fixed in 26 products on 1 platform, first by ALAS2023-2023-024, released February 17, 2023. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2022-0563 - Priority: Routine - CVSS: n/a (moderate) - EPSS: 0.0043 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Feb 17, 2023 ## Description Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-0563: A flaw was found in the Linux kernel's util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an INPUTRC environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. CVE-2021-3996: A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows a local user on a vulnerable system to unmount other users' filesystems that are either world-writable themselves (like /tmp) or mounted in a world-writable directory. An attacker may use this flaw to cause a denial of service to applications that use the affected filesystems. CVE-2021-3995: A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows an unprivileged local attacker to unmount FUSE filesystems that belong to certain other users who have a UID that is a prefix of the UID of the attacker in its string form. An attacker may use this flaw to cause a denial of service to applications that use the affected filesystems. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | libblkid amzn 2023 | 2.37.4-1.amzn2023.0.3 | [ALAS2023-2023-024](https://patchblox.com/security/data/fix/linux/alas2023-2023-024.md) | Feb 17, 2023 | | Linux | libblkid-debuginfo amzn 2023 | 2.37.4-1.amzn2023.0.3 | [ALAS2023-2023-024](https://patchblox.com/security/data/fix/linux/alas2023-2023-024.md) | Feb 17, 2023 | | Linux | libblkid-devel amzn 2023 | 2.37.4-1.amzn2023.0.3 | [ALAS2023-2023-024](https://patchblox.com/security/data/fix/linux/alas2023-2023-024.md) | Feb 17, 2023 | | Linux | libfdisk amzn 2023 | 2.37.4-1.amzn2023.0.3 | [ALAS2023-2023-024](https://patchblox.com/security/data/fix/linux/alas2023-2023-024.md) | Feb 17, 2023 | | Linux | libfdisk-debuginfo amzn 2023 | 2.37.4-1.amzn2023.0.3 | [ALAS2023-2023-024](https://patchblox.com/security/data/fix/linux/alas2023-2023-024.md) | Feb 17, 2023 | | Linux | libfdisk-devel amzn 2023 | 2.37.4-1.amzn2023.0.3 | [ALAS2023-2023-024](https://patchblox.com/security/data/fix/linux/alas2023-2023-024.md) | Feb 17, 2023 | | Linux | libmount amzn 2023 | 2.37.4-1.amzn2023.0.3 | [ALAS2023-2023-024](https://patchblox.com/security/data/fix/linux/alas2023-2023-024.md) | Feb 17, 2023 | | Linux | libmount-debuginfo amzn 2023 | 2.37.4-1.amzn2023.0.3 | [ALAS2023-2023-024](https://patchblox.com/security/data/fix/linux/alas2023-2023-024.md) | Feb 17, 2023 | | Linux | libmount-devel amzn 2023 | 2.37.4-1.amzn2023.0.3 | [ALAS2023-2023-024](https://patchblox.com/security/data/fix/linux/alas2023-2023-024.md) | Feb 17, 2023 | | Linux | libsmartcols amzn 2023 | 2.37.4-1.amzn2023.0.3 | [ALAS2023-2023-024](https://patchblox.com/security/data/fix/linux/alas2023-2023-024.md) | Feb 17, 2023 | | Linux | libsmartcols-debuginfo amzn 2023 | 2.37.4-1.amzn2023.0.3 | [ALAS2023-2023-024](https://patchblox.com/security/data/fix/linux/alas2023-2023-024.md) | Feb 17, 2023 | | Linux | libsmartcols-devel amzn 2023 | 2.37.4-1.amzn2023.0.3 | [ALAS2023-2023-024](https://patchblox.com/security/data/fix/linux/alas2023-2023-024.md) | Feb 17, 2023 | | Linux | libuuid amzn 2023 | 2.37.4-1.amzn2023.0.3 | [ALAS2023-2023-024](https://patchblox.com/security/data/fix/linux/alas2023-2023-024.md) | Feb 17, 2023 | | Linux | libuuid-debuginfo amzn 2023 | 2.37.4-1.amzn2023.0.3 | [ALAS2023-2023-024](https://patchblox.com/security/data/fix/linux/alas2023-2023-024.md) | Feb 17, 2023 | | Linux | libuuid-devel amzn 2023 | 2.37.4-1.amzn2023.0.3 | [ALAS2023-2023-024](https://patchblox.com/security/data/fix/linux/alas2023-2023-024.md) | Feb 17, 2023 | | Linux | python3-libmount amzn 2023 | 2.37.4-1.amzn2023.0.3 | [ALAS2023-2023-024](https://patchblox.com/security/data/fix/linux/alas2023-2023-024.md) | Feb 17, 2023 | | Linux | python3-libmount-debuginfo amzn 2023 | 2.37.4-1.amzn2023.0.3 | [ALAS2023-2023-024](https://patchblox.com/security/data/fix/linux/alas2023-2023-024.md) | Feb 17, 2023 | | Linux | util-linux amzn 2023 | 2.37.4-1.amzn2023.0.3 | [ALAS2023-2023-024](https://patchblox.com/security/data/fix/linux/alas2023-2023-024.md) | Feb 17, 2023 | | Linux | util-linux-core amzn 2023 | 2.37.4-1.amzn2023.0.3 | [ALAS2023-2023-024](https://patchblox.com/security/data/fix/linux/alas2023-2023-024.md) | Feb 17, 2023 | | Linux | util-linux-core-debuginfo amzn 2023 | 2.37.4-1.amzn2023.0.3 | [ALAS2023-2023-024](https://patchblox.com/security/data/fix/linux/alas2023-2023-024.md) | Feb 17, 2023 | | Linux | util-linux-debuginfo amzn 2023 | 2.37.4-1.amzn2023.0.3 | [ALAS2023-2023-024](https://patchblox.com/security/data/fix/linux/alas2023-2023-024.md) | Feb 17, 2023 | | Linux | util-linux-debugsource amzn 2023 | 2.37.4-1.amzn2023.0.3 | [ALAS2023-2023-024](https://patchblox.com/security/data/fix/linux/alas2023-2023-024.md) | Feb 17, 2023 | | Linux | util-linux-user amzn 2023 | 2.37.4-1.amzn2023.0.3 | [ALAS2023-2023-024](https://patchblox.com/security/data/fix/linux/alas2023-2023-024.md) | Feb 17, 2023 | | Linux | util-linux-user-debuginfo amzn 2023 | 2.37.4-1.amzn2023.0.3 | [ALAS2023-2023-024](https://patchblox.com/security/data/fix/linux/alas2023-2023-024.md) | Feb 17, 2023 | | Linux | uuidd amzn 2023 | 2.37.4-1.amzn2023.0.3 | [ALAS2023-2023-024](https://patchblox.com/security/data/fix/linux/alas2023-2023-024.md) | Feb 17, 2023 | | Linux | uuidd-debuginfo amzn 2023 | 2.37.4-1.amzn2023.0.3 | [ALAS2023-2023-024](https://patchblox.com/security/data/fix/linux/alas2023-2023-024.md) | Feb 17, 2023 | --- Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.