CVE-2007-5191: Canonical Ubuntu Linux

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs.

Affected products

• Canonical Ubuntu Linux: version 6.06 only; version 6.10 only; version 7.04 only
• Debian Debian Linux: version 3.1 only
• Fedoraproject Fedora: version 7 only
• Kernel Util-Linux: up to and including 2.13.1.1
• Loop-Aes-Utils Project Loop-Aes-Utils: affected versions not specified

Published 2007-10-04. Last modified 2026-06-16.