CVE-2026-13595A flaw was found in the libblkid library of util-linux.
Updated under an hour ago ()
Does this affect you?
It affects redhat hardened_images and 3 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a parent partition entry in a dynamically allocated array. When subsequent partition additions cause the array to be reallocated, this pointer becomes stale, leading to a heap use-after-free read. An attacker who can present a crafted block device image (for example, via USB insertion or a loop-mounted disk image) can trigger this flaw without user interaction, as libblkid is invoked automatically by udev/udisks as root on block-device hot-plug events. This could lead to limited information disclosure or denial of service.
- CVSS
- 5.3 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H
- Weakness (CWE)
- CWE-416
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Not given
- NVD analysis
- Analyzed
- Record last updated
- Aug 31, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
redhat hardened_images redhat:hardened_images | all versions | NVD |
redhat openshift_container_platform redhat:openshift_container_platform | from 4.0 through 4.22.1 | NVD |
redhat enterprise_linux redhat:enterprise_linux | 7.0; 8.0; 9.0; 10.0 | NVD |
kernel util-linux kernel:util-linux | before 2.42.2 | NVD |
References
- https://access.redhat.com/errata/RHSA-2026:26573vendor-advisory
- https://access.redhat.com/security/cve/CVE-2026-13595vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2494101issue-tracking, vendor-advisory
- https://github.com/util-linux/util-linux/commit/c0186f14fbdb02f64c8e0ba701ce727ea764ff4cpatch
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.