CVE detail
CVE-2026-13595
A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a parent partition entry in a dynamically allocated array. When subsequent partition additions cause the array to be reallocated, this pointer becomes stale, leading to a heap use-after-free read. An attacker who can present a crafted block device image (for example, via USB insertion or a loop-mounted disk image) can trigger this flaw without user interaction, as libblkid is invoked automatically by udev/udisks as root on block-device hot-plug events. This could lead to limited information disclosure or denial of service.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 17.9 · diversity 16.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 1
- within the 30d window
- Peak daily
- 1
- highest bucket
Evidence
Source links by recency
5 source links · newest first
- CVE-2026-13595 Util-linux: util-linux: heap use-after-free in libblkid nested partition probingMicrosoft MSRC
Information published.
vendormsrc.microsoft.comJul 1, 2026, 8:06 AM No excerpt available.
Exploitgithub.comJun 29, 2026, 9:16 AM- https://bugzilla.redhat.com/show_bug.cgi?id=2494101bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comJun 29, 2026, 9:16 AM - https://access.redhat.com/security/cve/CVE-2026-13595access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 29, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:26573access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 29, 2026, 9:16 AM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2020-27786CVSS 7.8 · High
A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl commands to midi devices could trigger a u…
- CVE-2020-15706CVSS 6.4 · Medium
GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function…
- CVE-2020-1712CVSS 7.8 · High
A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivilege…
- CVE-2020-8945CVSS 7.5 · High
The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This leads to a crash or po…
- CVE-2019-0211CVSS 7.8 · High
In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by…
- CVE-2019-7221CVSS 7.8 · High
The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free.