In the Linux kernel, the following vulnerability has been resolved:
__legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
... or we risk stealing final mntput from sync umount - raising mnt_count after umount(2) has verified that victim is not busy, but before it has set MNT_SYNC_UMOUNT; in that case __legitimize_mnt() doesn't see that it's safe to quietly undo mnt_count increment and leaves dropping the reference to caller, where it'll be a full-blown mntput().
Check under mount_lock is needed; leaving the current one done before taking that makes no sense - it's nowhere near common enough to bother with.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.15.185-126.190Upgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-livepatch-4.14.355-280.664Upgrade kernel-tools-devel | Jul 9, 2025 | Jun 18, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade python3-perf6.12-debuginfoUpgrade perf6.12-debuginfoUpgrade python3-perf6.12Upgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-libbpf-debuginfoUpgrade python3-perfUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.141-155.222Upgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.12.31-35.92Upgrade kernel-toolsUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-modules-extraUpgrade kernel-modules-extra-commonUpgrade python3-perf-debuginfoUpgrade kernelUpgrade perf6.12Upgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-debuginfoUpgrade kernel-libbpf-devel | Jul 11, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jun 20, 2025 | Jun 18, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libs | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perf | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Feb 3, 2026 | Jan 30, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 12, 2025 | Jun 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade kernel-azure-develUpgrade kernel-default-extraUpgrade dlm-kmp-azureUpgrade kernel-devel-azureUpgrade ocfs2-kmp-rtUpgrade dtb-appleUpgrade dtb-mediatekUpgrade kernel-macrosUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-vdsoUpgrade kernel-sourceUpgrade gfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade dtb-marvellUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-azureUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-rtUpgrade dtb-armUpgrade kernel-64kbUpgrade kernel-default-develUpgrade gfs2-kmp-rtUpgrade dtb-qcomUpgrade kernel-syms-azureUpgrade dtb-amlogicUpgrade reiserfs-kmp-rtUpgrade dtb-socionextUpgrade dtb-apmUpgrade kernel-rt_debugUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-amdUpgrade kernel-rt-develUpgrade kernel-defaultUpgrade dtb-allwinnerUpgrade dtb-alteraUpgrade kernel-rt_debug-develUpgrade dtb-amazonUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade dtb-exynosUpgrade dtb-nvidiaUpgrade dtb-renesasUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade dtb-sprdUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-debug-develUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-rt-extraUpgrade kernel-default-livepatchUpgrade kernel-default-baseUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade kernel-debugUpgrade kernel-azureUpgrade dtb-caviumUpgrade kernel-debug-vdsoUpgrade dtb-freescaleUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade kernel-obs-build | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-awsUpgrade linux-image-aws-fipsUpgrade linux-image-gke-6.8Upgrade linux-image-gke-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-5.15.0-1085-intel-iotgUpgrade linux-image-5.15.0-152-lowlatency-64kUpgrade linux-image-5.15.0-1084-ibmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-5.15.0-1090-realtimeUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-5.15.0-1090-gcp-fipsUpgrade linux-image-realtime-6.14Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-24.04cUpgrade linux-image-5.15.0-152-fipsUpgrade linux-image-5.15.0-1090-aws-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-azure-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-1090-aws-fipsUpgrade linux-image-azure-6.14Upgrade linux-image-realtime-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-gkeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-gcp-6.14Upgrade linux-image-oracleUpgrade linux-image-raspiUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-152-generic-lpaeUpgrade linux-image-azure-cvmUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1083-ibmUpgrade linux-image-azure-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1090-awsUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-5.15.0-1085-nvidia-lowlatencyUpgrade linux-image-5.15.0-152-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-intelUpgrade linux-image-virtual-6.14Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-aws-64k-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1054-xilinx-zynqmpUpgrade linux-image-raspi-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-aws-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-oracle-6.14Upgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-realtime-6.8.1Upgrade linux-image-gke-64k-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gcp-64kUpgrade linux-image-oem-20.04Upgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-1073-gkeopUpgrade linux-image-aws-6.14Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-5.15.0-1043-nvidia-tegraUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-gcp-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-azure-fips-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-ibm-classicUpgrade linux-image-gcp-fipsUpgrade linux-image-oem-6.14Upgrade linux-image-gke-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1032-nvidia-tegra-igx-rtUpgrade linux-image-oracle-5.15Upgrade linux-image-xilinxUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-5.15.0-1043-nvidia-tegra-rtUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-20.04dUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-5.15.0-1085-nvidiaUpgrade linux-image-5.15.0-1084-raspiUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-generic-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-raspi-realtimeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-5.15.0-1090-gcpUpgrade linux-image-5.15.0-1086-kvmUpgrade linux-image-raspi-6.14Upgrade linux-image-5.15.0-1032-nvidia-tegra-igxUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-5.15.0-152-genericUpgrade linux-image-oracle-64kUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-5.15.0-1088-oracleUpgrade linux-image-5.15.0-1083-intel-iot-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-gcpUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1087-gkeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-152-generic-64kUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-fips-5.15Upgrade linux-image-fipsUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-virtualUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04 | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub