https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 13:10:57 +0000 https://vulnerability.circl.lu/vuln/bell-cve-2026-78408 <p><strong>Affected:</strong> Alpaquita:stream: util-linux, BellSoft Hardened Containers:stream: util-linux</p> <p><strong>Affected:</strong> Alpaquita:stream: util-linux, BellSoft Hardened Containers:stream: util-linux</p> https://vulnerability.circl.lu/vuln/bell-cve-2026-78408 https://vulnerability.circl.lu/vuln/fkie_cve-2026-78408 <p>The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root&#39;s ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.</p> <p>The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root&#39;s ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-78408 https://vulnerability.circl.lu/vuln/msrc_cve-2026-78408 msrc_CVE-2026-78408 https://vulnerability.circl.lu/vuln/msrc_cve-2026-78408 https://vulnerability.circl.lu/vuln/opensuse-su-2026:11870-1 <p>libblkid-devel-2.42.3-1.1 on GA media</p> <p>libblkid-devel-2.42.3-1.1 on GA media</p> https://vulnerability.circl.lu/vuln/opensuse-su-2026:11870-1 https://vulnerability.circl.lu/vuln/rhsa-2026:63162 <p>util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection</p> <p>util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection</p> https://vulnerability.circl.lu/vuln/rhsa-2026:63162 https://vulnerability.circl.lu/vuln/suse-su-2026:23861-1 <p>Security update for util-linux</p> <p>Security update for util-linux</p> https://vulnerability.circl.lu/vuln/suse-su-2026:23861-1 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-78408 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: util-linux, Ubuntu:Pro:16.04:LTS: util-linux, Ubuntu:18.04:LTS: util-linux, Ubuntu:Pro:20.04:LTS: util-linux, Ubuntu:22.04:LTS: util-linux, Ubuntu:24.04:LTS: util-linux, Ubuntu:26.04:LTS: util-linux</p> <p>The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root&#39;s ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: util-linux, Ubuntu:Pro:16.04:LTS: util-linux, Ubuntu:18.04:LTS: util-linux, Ubuntu:Pro:20.04:LTS: util-linux, Ubuntu:22.04:LTS: util-linux, Ubuntu:24.04:LTS: util-linux, Ubuntu:26.04:LTS: util-linux</p> <p>The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root&#39;s ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-78408