Linux · Security advisory · November 7, 2026
ELSA-2026-93461: Security update for 14 packages
ELSA-2026-93461, released November 7, 2026, fixes 9 CVEs across 14 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
9
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0024
14th percentile
Priority of the 9 CVEs
Patch now 0
Urgent 0
High 9
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| libblkid | ol 10 | 0:2.40.2-18.0.1.el10_2.20 |
| libblkid-devel | ol 10 | 0:2.40.2-18.0.1.el10_2.20 |
| libfdisk | ol 10 | 0:2.40.2-18.0.1.el10_2.20 |
| libfdisk-devel | ol 10 | 0:2.40.2-18.0.1.el10_2.20 |
| libmount | ol 10 | 0:2.40.2-18.0.1.el10_2.20 |
| libmount-devel | ol 10 | 0:2.40.2-18.0.1.el10_2.20 |
| libsmartcols | ol 10 | 0:2.40.2-18.0.1.el10_2.20 |
| libsmartcols-devel | ol 10 | 0:2.40.2-18.0.1.el10_2.20 |
| libuuid | ol 10 | 0:2.40.2-18.0.1.el10_2.20 |
| libuuid-devel | ol 10 | 0:2.40.2-18.0.1.el10_2.20 |
| python3-libmount | ol 10 | 0:2.40.2-18.0.1.el10_2.20 |
| util-linux | ol 10 | 0:2.40.2-18.0.1.el10_2.20 |
| util-linux-core | ol 10 | 0:2.40.2-18.0.1.el10_2.20 |
| uuidd | ol 10 | 0:2.40.2-18.0.1.el10_2.20 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2026-78408 | Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority | 8.0 | 0.0024 | None reported | |
| High | CVE-2026-76642 | util-linux libmount Privilege Escalation via Failed Mount Helper | 8.0 | 0.0022 | None reported | |
| High | CVE-2026-78410 | Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection | 8.0 | 0.0020 | None reported | |
| High | CVE-2026-53615 | util-linux libblkid DOS extended-partition overflow produces invalid partition metadata | 8.0 | 0.0018 | None reported | |
| High | CVE-2026-53613 | util-linux mount target TOCTOU allows local privilege escalation | 8.0 | 0.0016 | None reported | |
| High | CVE-2026-27456 | util-linux: TOCTOU Race Condition in util-linux mount(8) - Loop Device Setup | 8.0 | 0.0016 | None reported | |
| High | CVE-2026-53612 | util-linux mount hook_owner TOCTOU allows local privilege escalation | 8.0 | 0.0015 | None reported | |
| High | CVE-2026-13595 | util-linux: A flaw was found in the libblkid library of util-linux | 8.0 | 0.0014 | None reported | |
| High | CVE-2026-53614 | util-linux LIBMOUNT_FORCE_MOUNT2 allows nosuid and noexec bypass | 8.0 | 0.0013 | None reported |
Showing 1 to 9 of 9
1