Pardus Boot Repair: Path traversal in pardus-mount-rootfs (CVE-2026-92080)

CVE-2026-92080 is a path traversal vulnerability in the pardus-mount-rootfs utility, a component of pardus-boot-repair. The vulnerability arises because the utility reads mountpoint paths directly from a target filesystem's /etc/fstab and concatenates them without adequate validation. An attacker who can control the fstab content of a filesystem processed by this tool can cause the application to perform a mount operation outside of its intended DESTDIR, potentially leading to unauthorized filesystem access with elevated privileges.

Impact

Successful exploitation results in a privileged mount escape, allowing the mounting of filesystems at arbitrary paths on the host. This impacts system integrity by providing an attacker with a mechanism to manipulate or expose file paths on the host system. The specific consequences of such an escape depend on the host environment and the filesystem contents chosen by the attacker.

Recommendation

• Upgrade pardus-boot-repair to version 1.1.0 or later as advised by the vendor.
• Implement monitoring for the usage of the /usr/bin/pardus-mount-rootfs utility, particularly when invoked with untrusted or externally sourced filesystem images.
• Audit logs for instances where mount operations result in paths outside of expected repair directories.