6.8
MEDIUM CVSS 3.1
CVE-2026-13595
Util-linux: util-linux: heap use-after-free in libblkid nested partition probing
Description

A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a parent partition entry in a dynamically allocated array. When subsequent partition additions cause the array to be reallocated, this pointer becomes stale, leading to a heap use-after-free read. An attacker who can present a crafted block device image (for example, via USB insertion or a loop-mounted disk image) can trigger this flaw without user interaction, as libblkid is invoked automatically by udev/udisks as root on block-device hot-plug events. This could lead to limited information disclosure or denial of service.

INFO

Published Date :

June 29, 2026, 8:06 a.m.

Last Modified :

June 29, 2026, 8:06 a.m.

Remotely Exploit :

No

Source :

redhat
Affected Products

The following products are affected by CVE-2026-13595 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Redhat enterprise_linux
2 Redhat openshift_container_platform
3 Redhat enterprise_linux
4 Redhat hardened_images
CVSS Scores
The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and displays CVSS scores from various sources for each CVE.
Score Version Severity Vector Exploitability Score Impact Score Source
CVSS 3.1 MEDIUM 53f830b8-0a3f-465b-8143-3b8a9948e749
CVSS 3.1 MEDIUM [email protected]
Solution
Update the util-linux package to a version that addresses the heap use-after-free vulnerability in libblkid.
  • Update the util-linux package.
  • Rebuild packages linking against libblkid.
  • Validate partition probing logic.
  • Avoid processing untrusted block devices.

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2026-13595 vulnerability anywhere in the article.

EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.