Sploitus

10 exploited vulnerabilities in Util-Linux

Vulnerabilities with publicly known exploits

Vendors
Alt Linux, Suse, Unknown, Debian, Juniper Networks, Canonical
With known exploits
10
Affected Kernel Util-linux versions
≤ 2.37.1, 2.31, 2.39.4, 2.37.4, 2.37.3, 2.41.4, 2.22
Affected Linux Util-linux versions
≤ 2.19, 2.2, 2.5, 2.7, 2.8, 2.9, 2.10, 2.11, 2.12, 2.13, 2.14, 2.15, 2.16, 2.17, 2.18

Vulnerabilities with exploits

Highest CVSS first — 3 of these already have exploit code on Sploitus

CVE-2021-37600
CVSS 10.0 HIGH 2021-07-28FIX AVAILABLE
CVE-2018-7738
CVSS 7.8 HIGH 2018-03-06
CVE-2024-28085 2 exploits
CVSS 6.2 MEDIUM 2024-03-27FIX AVAILABLE
util-linux wall Escape Sequence InjectionExploit for Improper Neutralization of Escape, Meta, or Control Sequences in Kernel Util-Linux
CVE-2025-14104
CVSS 6.1 MEDIUM 2025-01-01
CVE-2022-0563
CVSS 5.5 MEDIUM 2022-02-21FIX AVAILABLE
CVE-2021-3996 2 exploits
CVSS 5.5 MEDIUM 2022-01-24
Ubuntu Server snap-confine must_mkdir_and_open_with_perms() Race Condition Vulnerabilitysnap-confine must_mkdir_and_open_with_perms() Race Condition
CVE-2021-3995 2 exploits
CVSS 5.5 MEDIUM 2022-01-24
Ubuntu Server snap-confine must_mkdir_and_open_with_perms() Race Condition Vulnerabilitysnap-confine must_mkdir_and_open_with_perms() Race Condition
CVE-2026-27456
CVSS 4.7 MEDIUM 2026-04-03FIX AVAILABLE
CVE-2011-1676
CVSS 4.6 MEDIUM 2011-04-10FIX AVAILABLE
CVE-2015-5218
CVSS 2.1 LOW 2015-11-05FIX AVAILABLE