CVE-2021-3995

A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows an unprivileged local attacker to unmount FUSE filesystems that belong to certain other users who have a UID that is a prefix of the UID of the attacker in its string form. An attacker may use this flaw to cause a denial of service to applications that use the affected filesystems.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 48%
Affected Products (NVD)
VendorProductVersion
kernelutil-linux
2.34 ≤
𝑥
< 2.37.3
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
util-linux
bookworm
2.38.1-5+deb12u1
fixed
bookworm (security)
2.38.1-5+deb12u1
fixed
bullseye
2.36.1-8+deb11u2
fixed
bullseye (security)
2.36.1-8+deb11u2
fixed
buster
not-affected
sid
2.40.2-10
fixed
stretch
not-affected
trixie
2.40.2-9
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
util-linux
bionic
not-affected
focal
Fixed 2.34-0.1ubuntu9.3
released
impish
Fixed 2.36.1-8ubuntu2.2
released
jammy
Fixed 2.37.2-4ubuntu2
released
trusty
not-affected
xenial
not-affected
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libblkid-devel
suse enterprise desktop 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise desktop 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise desktop 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise desktop 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise desktop 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise sap 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise sap 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise sap 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise sap 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise sap 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise server 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise server 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise server 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise server 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise server 15 SP7
2.40.4-150700.2.4
fixed
libblkid-devel-static
suse enterprise desktop 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise desktop 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise desktop 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise desktop 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise desktop 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise sap 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise sap 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise sap 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise sap 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise sap 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise server 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise server 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise server 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise server 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise server 15 SP7
2.40.4-150700.2.4
fixed
libblkid1
suse enterprise desktop 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise desktop 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise desktop 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise desktop 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise desktop 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise sap 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise sap 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise sap 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise sap 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise sap 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise server 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise server 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise server 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise server 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise server 15 SP7
2.40.4-150700.2.4
fixed
libblkid1-32bit
suse enterprise desktop 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise desktop 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise desktop 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise desktop 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise desktop 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise sap 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise sap 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise sap 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise sap 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise sap 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise server 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise server 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise server 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise server 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise server 15 SP7
2.40.4-150700.2.4
fixed
libfdisk-devel
suse enterprise desktop 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise desktop 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise desktop 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise desktop 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise desktop 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise sap 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise sap 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise sap 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise sap 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise sap 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise server 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise server 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise server 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise server 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise server 15 SP7
2.40.4-150700.2.4
fixed
libfdisk1
suse enterprise desktop 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise desktop 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise desktop 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise desktop 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise desktop 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise sap 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise sap 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise sap 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise sap 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise sap 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise server 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise server 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise server 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise server 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise server 15 SP7
2.40.4-150700.2.4
fixed
libmount-devel
suse enterprise desktop 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise desktop 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise desktop 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise desktop 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise desktop 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise sap 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise sap 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise sap 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise sap 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise sap 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise server 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise server 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise server 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise server 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise server 15 SP7
2.40.4-150700.2.4
fixed
libmount1
suse enterprise desktop 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise desktop 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise desktop 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise desktop 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise desktop 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise sap 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise sap 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise sap 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise sap 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise sap 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise server 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise server 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise server 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise server 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise server 15 SP7
2.40.4-150700.2.4
fixed
libmount1-32bit
suse enterprise desktop 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise desktop 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise desktop 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise desktop 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise desktop 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise sap 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise sap 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise sap 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise sap 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise sap 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise server 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise server 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise server 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise server 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise server 15 SP7
2.40.4-150700.2.4
fixed
libsmartcols-devel
suse enterprise desktop 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise desktop 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise desktop 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise desktop 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise desktop 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise sap 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise sap 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise sap 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise sap 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise sap 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise server 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise server 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise server 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise server 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise server 15 SP7
2.40.4-150700.2.4
fixed
libsmartcols1
suse enterprise desktop 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise desktop 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise desktop 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise desktop 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise desktop 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise sap 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise sap 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise sap 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise sap 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise sap 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise server 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise server 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise server 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise server 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise server 15 SP7
2.40.4-150700.2.4
fixed
libuuid-devel
suse enterprise desktop 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise desktop 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise desktop 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise desktop 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise desktop 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise sap 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise sap 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise sap 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise sap 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise sap 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise server 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise server 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise server 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise server 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise server 15 SP7
2.40.4-150700.2.4
fixed
libuuid-devel-static
suse enterprise desktop 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise desktop 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise desktop 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise desktop 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise desktop 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise sap 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise sap 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise sap 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise sap 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise sap 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise server 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise server 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise server 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise server 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise server 15 SP7
2.40.4-150700.2.4
fixed
libuuid1
suse enterprise desktop 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise desktop 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise desktop 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise desktop 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise desktop 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise sap 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise sap 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise sap 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise sap 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise sap 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise server 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise server 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise server 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise server 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise server 15 SP7
2.40.4-150700.2.4
fixed
libuuid1-32bit
suse enterprise desktop 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise desktop 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise desktop 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise desktop 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise desktop 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise sap 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise sap 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise sap 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise sap 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise sap 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise server 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise server 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise server 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise server 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise server 15 SP7
2.40.4-150700.2.4
fixed
login_defs
suse enterprise desktop 15 SP3
4.8.1-150300.4.3.8
fixed
suse enterprise sap 15 SP3
4.8.1-150300.4.3.8
fixed
suse enterprise server 15 SP3
4.8.1-150300.4.3.8
fixed
shadow
suse enterprise desktop 15 SP3
4.8.1-150300.4.3.8
fixed
suse enterprise sap 15 SP3
4.8.1-150300.4.3.8
fixed
suse enterprise server 15 SP3
4.8.1-150300.4.3.8
fixed
util-linux
suse enterprise desktop 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise desktop 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise desktop 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise desktop 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise desktop 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise sap 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise sap 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise sap 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise sap 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise sap 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise server 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise server 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise server 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise server 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise server 15 SP7
2.40.4-150700.2.4
fixed
util-linux-extra
suse enterprise desktop 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise sap 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise server 15 SP7
2.40.4-150700.2.4
fixed
util-linux-lang
suse enterprise desktop 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise desktop 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise desktop 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise desktop 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise desktop 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise sap 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise sap 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise sap 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise sap 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise sap 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise server 15 SP3
2.36.2-150300.4.14.3
fixed
suse enterprise server 15 SP4
2.37.2-150400.6.26
fixed
suse enterprise server 15 SP5
2.37.4-150500.7.16
fixed
suse enterprise server 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise server 15 SP7
2.40.4-150700.2.4
fixed
util-linux-systemd
suse enterprise desktop 15 SP3
2.36.2-150300.4.14.2
fixed
suse enterprise desktop 15 SP4
2.37.2-150400.6.5
fixed
suse enterprise desktop 15 SP5
2.37.4-150500.7.2
fixed
suse enterprise desktop 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise desktop 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise sap 15 SP3
2.36.2-150300.4.14.2
fixed
suse enterprise sap 15 SP4
2.37.2-150400.6.5
fixed
suse enterprise sap 15 SP5
2.37.4-150500.7.2
fixed
suse enterprise sap 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise sap 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise server 15 SP3
2.36.2-150300.4.14.2
fixed
suse enterprise server 15 SP4
2.37.2-150400.6.5
fixed
suse enterprise server 15 SP5
2.37.4-150500.7.2
fixed
suse enterprise server 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise server 15 SP7
2.40.4-150700.2.4
fixed
util-linux-tty-tools
suse enterprise desktop 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise desktop 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise sap 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise sap 15 SP7
2.40.4-150700.2.4
fixed
suse enterprise server 15 SP6
2.39.3-150600.2.1
fixed
suse enterprise server 15 SP7
2.40.4-150700.2.4
fixed