High severity7.8NVD Advisory· Published Mar 7, 2018· Updated Jun 17, 2026

CVE-2018-7738

Description

In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands in a mountpoint name, which is mishandled during a umount command (within Bash) by a different user, as demonstrated by logging in as root and entering umount followed by a tab character for autocompletion.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Linux/Util Linux
cpe:2.3:a:kernel:util-linux:*:*:*:*:*:*:*:*
Range: <=2.31
util-linux/util-linuxllm-fuzzy
Range: < 2.32-rc1
osv-coords51 versions
pkg:rpm/opensuse/python-libmount&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/python-libmount&distro=openSUSE%20Leap%2015.5 pkg:rpm/suse/python-libmount&distro=SUSE%20Enterprise%20Storage%204 pkg:rpm/suse/python-libmount&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/python-libmount&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/python-libmount&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS pkg:rpm/suse/python-libmount&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3 pkg:rpm/suse/python-libmount&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/python-libmount&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2 pkg:rpm/suse/python-libmount&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3 pkg:rpm/suse/python-libmount&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/python-libmount&distro=SUSE%20OpenStack%20Cloud%207 pkg:rpm/suse/util-linux&distro=SUSE%20Enterprise%20Storage%204 pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015 pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3 pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2 pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3 pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3 pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP5 pkg:rpm/suse/util-linux&distro=SUSE%20OpenStack%20Cloud%207 pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Enterprise%20Storage%204 pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015 pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015 pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3 pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2 pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3 pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/util-linux-systemd&distro=SUSE%20OpenStack%20Cloud%207
< 2.31.1-150000.9.24.1+ 50 more
- (no CPE)range: < 2.31.1-150000.9.24.1
- (no CPE)range: < 2.31.1-150000.9.24.1
- (no CPE)range: < 2.28-44.18.38
- (no CPE)range: < 2.29.2-3.8.1
- (no CPE)range: < 2.28-44.18.38
- (no CPE)range: < 2.28-44.18.38
- (no CPE)range: < 2.29.2-3.8.1
- (no CPE)range: < 2.33.2-4.33.1
- (no CPE)range: < 2.28-44.18.38
- (no CPE)range: < 2.29.2-3.8.1
- (no CPE)range: < 2.33.2-4.33.1
- (no CPE)range: < 2.28-44.18.38
- (no CPE)range: < 2.28-44.18.18
- (no CPE)range: < 2.29.2-3.8.1
- (no CPE)range: < 2.33.2-150100.4.40.1
- (no CPE)range: < 2.33.2-150100.4.40.1
- (no CPE)range: < 2.31.1-9.3.1
- (no CPE)range: < 2.28-44.18.18
- (no CPE)range: < 2.28-44.18.18
- (no CPE)range: < 2.29.2-3.8.1
- (no CPE)range: < 2.33.2-4.33.1
- (no CPE)range: < 2.33.2-150100.4.40.1
- (no CPE)range: < 2.33.2-150100.4.40.1
- (no CPE)range: < 2.28-44.18.18
- (no CPE)range: < 2.29.2-3.8.1
- (no CPE)range: < 2.33.2-4.33.1
- (no CPE)range: < 2.33.2-150100.4.40.1
- (no CPE)range: < 2.33.2-150100.4.40.1
- (no CPE)range: < 2.29.2-3.8.1
- (no CPE)range: < 2.33.2-4.33.1
- (no CPE)range: < 2.29.2-3.8.1
- (no CPE)range: < 2.33.2-4.33.1
- (no CPE)range: < 2.28-44.18.18
- (no CPE)range: < 2.28-44.18.25
- (no CPE)range: < 2.29.2-3.8.1
- (no CPE)range: < 2.33.2-150100.4.40.1
- (no CPE)range: < 2.33.2-150100.4.40.1
- (no CPE)range: < 2.31.1-9.3.1
- (no CPE)range: < 2.31.1-9.3.1
- (no CPE)range: < 2.28-44.18.25
- (no CPE)range: < 2.28-44.18.25
- (no CPE)range: < 2.29.2-3.8.1
- (no CPE)range: < 2.33.2-4.33.1
- (no CPE)range: < 2.33.2-150100.4.40.1
- (no CPE)range: < 2.33.2-150100.4.40.1
- (no CPE)range: < 2.28-44.18.25
- (no CPE)range: < 2.29.2-3.8.1
- (no CPE)range: < 2.33.2-4.33.1
- (no CPE)range: < 2.33.2-150100.4.40.1
- (no CPE)range: < 2.33.2-150100.4.40.1
- (no CPE)range: < 2.28-44.18.25

Patches

Vulnerability mechanics

References

bugs.debian.org/892179nvdPatchThird Party Advisory
github.com/karelzak/util-linux/commit/75f03badd7ed9f1dd951863d75e756883d3acc55nvdPatchThird Party Advisory
www.securityfocus.com/bid/103367nvdThird Party AdvisoryVDB Entry
github.com/karelzak/util-linux/issues/539nvdIssue TrackingThird Party Advisory
www.debian.org/security/2018/dsa-4134nvdThird Party Advisory
security.netapp.com/advisory/ntap-20241213-0002/nvd
usn.ubuntu.com/4512-1/nvd

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000