Nixpkgs security tracker

Login with GitHub

Suggestion detail

Untriaged
Permalink CVE-2026-13595
6.8 MEDIUM
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): Low (L)
  • Integrity (I): None (N)
  • Availability (A): High (H)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): Low (L)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): None (N)
  • Modified Availability (MA): High (H)
created 3 weeks, 5 days ago Activity log
  • Created suggestion
Util-linux: util-linux: heap use-after-free in libblkid nested partition probing

A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a parent partition entry in a dynamically allocated array. When subsequent partition additions cause the array to be reallocated, this pointer becomes stale, leading to a heap use-after-free read. An attacker who can present a crafted block device image (for example, via USB insertion or a loop-mounted disk image) can trigger this flaw without user interaction, as libblkid is invoked automatically by udev/udisks as root on block-device hot-plug events. This could lead to limited information disclosure or denial of service.

Affected products

rhcos
util-linux

Matching in nixpkgs

pkgs.more

None

  • nixos-unstable 2.42
    • nixpkgs-unstable 2.42
    • nixos-unstable-small 2.42
  • nixos-26.05 2.42
    • nixos-26.05-small 2.42
    • nixpkgs-26.05-darwin 2.42

pkgs.wall

None

  • nixos-unstable 2.42
    • nixpkgs-unstable 2.42
    • nixos-unstable-small 2.42
  • nixos-26.05 2.42
    • nixos-26.05-small 2.42
    • nixpkgs-26.05-darwin 2.42

pkgs.eject

None

  • nixos-unstable 2.42
    • nixpkgs-unstable 2.42
    • nixos-unstable-small 2.42
  • nixos-26.05 2.42
    • nixos-26.05-small 2.42
    • nixpkgs-26.05-darwin 2.42

pkgs.mount

None

  • nixos-unstable 2.42
    • nixpkgs-unstable 2.42
    • nixos-unstable-small 2.42
  • nixos-26.05 2.42
    • nixos-26.05-small 2.42
    • nixpkgs-26.05-darwin 2.42

pkgs.logger

None

  • nixos-unstable 2.42
    • nixpkgs-unstable 2.42
    • nixos-unstable-small 2.42
  • nixos-26.05 2.42
    • nixos-26.05-small 2.42
    • nixpkgs-26.05-darwin 2.42

pkgs.umount

None

  • nixos-unstable 2.42
    • nixpkgs-unstable 2.42
    • nixos-unstable-small 2.42
  • nixos-26.05 2.42
    • nixos-26.05-small 2.42
    • nixpkgs-26.05-darwin 2.42

pkgs.libuuid

Set of system utilities for Linux

  • nixos-unstable 2.42
    • nixpkgs-unstable 2.42
    • nixos-unstable-small 2.42
  • nixos-26.05 2.42
    • nixos-26.05-small 2.42
    • nixpkgs-26.05-darwin 2.42

pkgs.utillinux

Set of system utilities for Linux

  • nixos-unstable 2.42
    • nixpkgs-unstable 2.42
    • nixos-unstable-small 2.42
  • nixos-26.05 2.42
    • nixos-26.05-small 2.42
    • nixpkgs-26.05-darwin 2.42

pkgs.util-linux

Set of system utilities for Linux

  • nixos-unstable 2.42
    • nixpkgs-unstable 2.42
    • nixos-unstable-small 2.42
  • nixos-26.05 2.42
    • nixos-26.05-small 2.42
    • nixpkgs-26.05-darwin 2.42

pkgs.libsmartcols

Set of system utilities for Linux

  • nixos-unstable 2.42
    • nixpkgs-unstable 2.42
    • nixos-unstable-small 2.42
  • nixos-26.05 2.42
    • nixos-26.05-small 2.42
    • nixpkgs-26.05-darwin 2.42

Package maintainers