How severe is CVE-2007-5191?

CVE-2007-5191 has a CVSS 2.0 base score of 7.2, rated high severity.

Is CVE-2007-5191 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (35th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2007-5191?

CVE-2007-5191 primarily affects Kernel Util-linux. In total, 7 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2007-5191?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2007-5191 published?

CVE-2007-5191 was published on 2007-10-04 and last updated on 2026-06-16.

CVE-2007-5191

CVE-2007-5191 is a high-severity vulnerability in Kernel Util-linux with a CVSS 2.0 base score of 7.2. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-252.

Key facts

Severity: High (CVSS 2.0 base score 7.2)
EPSS exploit prediction: 0% (35th percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-252
Affected product: Kernel Util-linux
Published: 2007-10-04
Last modified: 2026-06-16

Description

mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs.

Frequently asked questions

What is CVE-2007-5191?: mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs.
How severe is CVE-2007-5191?: CVE-2007-5191 has a CVSS 2.0 base score of 7.2, rated high severity.
Is CVE-2007-5191 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (35th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2007-5191?: CVE-2007-5191 primarily affects Kernel Util-linux. In total, 7 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2007-5191?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2007-5191 published?: CVE-2007-5191 was published on 2007-10-04 and last updated on 2026-06-16.

References

Affected products (7)

cpe:2.3:a:kernel:util-linux:*:*:*:*:*:*:*:*
cpe:2.3:a:loop-aes-utils_project:loop-aes-utils:-:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:7:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*

More vulnerabilities in Kernel Util-linux

CVE-2015-5224 — Critical (CVSS 9.8): The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name…
CVE-2018-7738 — High (CVSS 7.8): In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands…
CVE-2014-9114 — High (CVSS 7.8): Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code.
CVE-2016-2779 — High (CVSS 7.8): runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes…
CVE-2026-13595 — Medium (CVSS 6.8): A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86,…
CVE-2020-21583 — Medium (CVSS 6.7): An issue was discovered in hwclock.13-v2.27 allows attackers to gain escalated privlidges or execute arbitrary commands…

All CVEs affecting Kernel Util-linux →

Other CWE-252 vulnerabilities

CVE-2025-66565 — Critical (CVSS 9.8): Fiber Utils is a collection of common functions created for Fiber. In versions 2.0.0-rc.3 and below, when the system's…
CVE-2021-38171 — Critical (CVSS 9.8): adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the init_get_bits return value, which is a…
CVE-2021-26955 — Critical (CVSS 9.8): An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because…
CVE-1999-0199 — Critical (CVSS 9.8): manual/search.texi in the GNU C Library (aka glibc) before 2.2 lacks a statement about the unspecified tdelete return…
CVE-2019-15900 — Critical (CVSS 9.8): An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. On platforms without…
CVE-2010-0211 — Critical (CVSS 9.8): The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the…

Browse all CWE-252 vulnerabilities →