Every CVE Search/ Get API key

CVE-2005-2876

umount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and other packages such as loop-aes...

7.2 HighFix available

CVE-2005-2876 is a high vulnerability (CVSS 7.2) in Andries Brouwer Util-linux, published September 13, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 36th percentile. Fixed in util-linux 2.12p-8.

umount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and other packages such as loop-aes-utils, allows local users with unmount permissions to gain privileges via the -r (remount) option, which causes the file system to be remounted with just the read-only flag, which effectively clears the nosuid, nodev, and other flags.

Exploit likelihood

0.43%Down 1.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.2

umount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and other packages such as loop-aes-utils, allows local users with unmount permissions to gain privileges via the -r (remount) option, which causes the file system to be remounted with just the read-only flag, which effectively clears the nosuid, nodev, and other flags.

Record
CVE-2005-2876
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE List No score

umount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and other packages such as loop-aes-utils, allows local users with unmount permissions to gain privileges via the -r (remount) option, which causes the file system to be remounted with just the read-only flag, which effectively clears the nosuid, nodev, and other flags.

Record
CVE-2005-2876
Updated
2026-11-02
EUVDEUVD-2005-2876 No score

umount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and other packages such as loop-aes-utils, allows local users with unmount permissions to gain privileges via the -r (remount) option, which causes the file system to be remounted with just the read-only flag, which effectively clears the nosuid, nodev, and other flags.

Record
EUVD-2005-2876
Updated
2026-11-03
GitHub AdvisoriesGHSA-96fj-vjjr-c856 No score

umount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and other packages such as loop-aes...

umount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and other packages such as loop-aes-utils, allows local users with unmount permissions to gain privileges via the -r (remount) option, which causes the file system to be remounted with just the read-only flag, which effectively clears the nosuid, nodev, and other flags.

Record
GHSA-96fj-vjjr-c856
Updated
2026-11-02
OSV No score

umount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and other packages such as loop-aes-utils, allows local users with unmount permissions to gain privileges via the -r (remount) option, which causes the file system to be remounted with just the read-only flag, which effectively clears the nosuid, nodev, and other flags.

Record
CVE-2005-2876
Updated
2026-11-02
OSVDEBIAN-CVE-2005-2876 No score

umount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and other packages such as loop-aes-utils, allows local users with unmount permissions to gain privileges via the -r (remount) option, which causes the file system to be remounted with just the read-only flag, which effectively clears the nosuid, nodev, and other flags.

Record
DEBIAN-CVE-2005-2876
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
util-linux
Debian:12
 before 2.12p-8
2.12p-8
util-linux
Debian:13
 before 2.12p-8
2.12p-8
util-linux
Debian:14
 before 2.12p-8
2.12p-8
util-linux
Debian:3.0
 before 2.11n-7woody1, plus listed versions
2.11n-7
2.11n-7woody1
util-linux
Debian:3.1
 before 2.12p-4sarge1, plus listed versions
2.12p-4
2.12p-4sarge1
loop-aes-utils
Debian:3.1
 before 2.12p-4sarge1, plus listed versions
2.12p-4
2.12p-4sarge1
losetup
Red Hat:enterprise_linux:3::as
 before 0:2.11y-31.11
0:2.11y-31.11
mount
Red Hat:enterprise_linux:3::as
 before 0:2.11y-31.11
0:2.11y-31.11
util-linux
Red Hat:enterprise_linux:3::as
 before 0:2.11y-31.11
0:2.11y-31.11
util-linux-debuginfo
Red Hat:enterprise_linux:3::as
 before 0:2.11y-31.11
0:2.11y-31.11
Show 20 moreShow less
Affected packages
PackageAffectedFixed
losetup
Red Hat:enterprise_linux:3::desktop
 before 0:2.11y-31.11
0:2.11y-31.11
mount
Red Hat:enterprise_linux:3::desktop
 before 0:2.11y-31.11
0:2.11y-31.11
util-linux
Red Hat:enterprise_linux:3::desktop
 before 0:2.11y-31.11
0:2.11y-31.11
util-linux-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 0:2.11y-31.11
0:2.11y-31.11
losetup
Red Hat:enterprise_linux:3::es
 before 0:2.11y-31.11
0:2.11y-31.11
mount
Red Hat:enterprise_linux:3::es
 before 0:2.11y-31.11
0:2.11y-31.11
util-linux
Red Hat:enterprise_linux:3::es
 before 0:2.11y-31.11
0:2.11y-31.11
util-linux-debuginfo
Red Hat:enterprise_linux:3::es
 before 0:2.11y-31.11
0:2.11y-31.11
losetup
Red Hat:enterprise_linux:3::ws
 before 0:2.11y-31.11
0:2.11y-31.11
mount
Red Hat:enterprise_linux:3::ws
 before 0:2.11y-31.11
0:2.11y-31.11
util-linux
Red Hat:enterprise_linux:3::ws
 before 0:2.11y-31.11
0:2.11y-31.11
util-linux-debuginfo
Red Hat:enterprise_linux:3::ws
 before 0:2.11y-31.11
0:2.11y-31.11
util-linux
Red Hat:enterprise_linux:4::as
 before 0:2.12a-16.EL4.12
0:2.12a-16.EL4.12
util-linux-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:2.12a-16.EL4.12
0:2.12a-16.EL4.12
util-linux
Red Hat:enterprise_linux:4::desktop
 before 0:2.12a-16.EL4.12
0:2.12a-16.EL4.12
util-linux-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:2.12a-16.EL4.12
0:2.12a-16.EL4.12
util-linux
Red Hat:enterprise_linux:4::es
 before 0:2.12a-16.EL4.12
0:2.12a-16.EL4.12
util-linux-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:2.12a-16.EL4.12
0:2.12a-16.EL4.12
util-linux
Red Hat:enterprise_linux:4::ws
 before 0:2.12a-16.EL4.12
0:2.12a-16.EL4.12
util-linux-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:2.12a-16.EL4.12
0:2.12a-16.EL4.12

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 30 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open