CVE Database
/

CVE-2021-3996

Back to search

CVE-2021-3996

Published: Aug 23, 2022

Modified: Oct 15, 2024

PUBLISHED

Description

A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows a local user on a vulnerable system to unmount other users' filesystems that are either world-writable themselves (like /tmp) or mounted in a world-writable directory. An attacker may use this flaw to cause a denial of service to applications that use the affected filesystems.

VendorProductVersions

n/a

util-linux

affected
Fixed in util-linux v2.37.3

Weaknesses (CWE)

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now