Detections
Analytics
Echo: util-linux: security update to 2.41.5-0+deb13u1+e1
high Tenable Self-Hosted Container Security Plugin ID 460585
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through
2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount`
requests validate an `/etc/fstab` target before the mount operation re-resolves that pathname. A local
low-privileged user authorized by an fstab `user` or `users` entry whose target has an attacker-writable
ancestor can use `renameat2(RENAME_EXCHANGE)` to swap a path component and redirect an authorized mount to
a root-owned location, such as mounting attacker-controlled content over `/etc/sudoers.d`, and thereby
gain root privileges. Versions 2.41.5 and 2.42.2 pin targets for the new mount API, and 2.42.4 pins legacy
targets through `/proc/self/fd`; the documented legacy fallback without `/proc` remains affected.
(CVE-2026-53613)
Solution
Update the util-linux library and its related packages to version 2.41.5-0+deb13u1+e1 or later.See Also
Plugin Details
Severity: High
ID: 460585
Version: Revision 1.2
Type: Local
Family: Echo Local Security Checks
Published: 10/2/2026
Updated: 10/16/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 6.9
Percentile: 96.52
CVSS v2
Risk Factor: Medium
Base Score: 6
Temporal Score: 4.7
Vector: CVSS2#AV:L/AC:H/Au:S/C:C/I:C/A:C
CVSS Score Source: CVE-2026-53613
CVSS v3
Risk Factor: High
Base Score: 7
Temporal Score: 6.3
Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 6/17/2026
Vulnerability Publication Date: 6/16/2026
Reference Information
CVE: CVE-2026-53613
IAVA: 2026-A-0384