CVE-2007-5191

HIGH 7.2CVE-2007-5191 · Published 04/10/2007 · updated 16/06/2026

In short

CVE-2007-5191 is a HIGH (CVSS 7.2) vulnerability affecting util-linux (kernel).
Chance of exploitation in the next 30 days (EPSS): 0.44%, higher than 38.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
util-linux kernel	`≤ 2.13.1.1`	No fix yet

Description

mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs.

References

bugs.gentoo.org/show_bug.cgi · Issue Tracking
frontal2.mandriva.com/en/security/advisories · Third Party Advisory
git.kernel.org
lists.opensuse.org/opensuse-security-announce/2007-10/msg00008.html · Mailing List
lists.vmware.com/pipermail/security-announce/2008/000002.html · Third Party Advisory
secunia.com/advisories/27104 · Third Party Advisory
secunia.com/advisories/27122 · Third Party Advisory
secunia.com/advisories/27145 · Third Party Advisory
secunia.com/advisories/27188 · Third Party Advisory
secunia.com/advisories/27283 · Third Party Advisory
secunia.com/advisories/27354 · Third Party Advisory
secunia.com/advisories/27399

More vulnerabilities in util-linux

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

util-linux

kernel

≤ 2.13.1.1

No fix yet

More vulnerabilities in util-linux

See all →