一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月14日

CVE-2026-88838 [MEDIUM] – A flaw was found in BusyBox’s mount utility. A non-root user can bypass mount security res

未分类
📑 文章目录

A flaw was found in BusyBox’s mount utility. A non-root user can bypass mount security restrictions set in /etc/fstab by specifying clearing-mask options on the command line. These options pass the non-root flag filter and are merged with fstab options as strings; when the combined options are re-parsed, clearing options can override nosuid, nodev, and noexec protections the administrator intended to enforce.