Is CVE-2026-76642 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-76642?

CVE-2026-76642 has a CVSS v3 severity of HIGH (7.8).

Back

CVE-2026-76642

Description

util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.