In the Linux kernel, the following vulnerability has been resolved:
__legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
... or we risk stealing final mntput from sync umount - raising mnt_count after umount(2) has verified that victim is not busy, but before it has set MNT_SYNC_UMOUNT; in that case __legitimize_mnt() doesn't see that it's safe to quietly undo mnt_count increment and leaves dropping the reference to caller, where it'll be a full-blown mntput().
Check under mount_lock is needed; leaving the current one done before taking that makes no sense - it's nowhere near common enough to bother with.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.355-280.664Upgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.185-126.190Upgrade kernel-headersUpgrade python-perf | Jul 9, 2025 | Jun 18, 2025 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel6.12-modules-extraUpgrade bpftool-debuginfoUpgrade perf6.12Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-tools-develUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.12.31-35.92Upgrade kernel-toolsUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade python3-perf6.12Upgrade perf6.12-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade python3-perfUpgrade kernel-livepatch-6.1.141-155.222Upgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel6.12Upgrade kernel-libbpf-debuginfo | Jul 11, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jun 20, 2025 | Jun 18, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libs | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libs | Feb 3, 2026 | Jan 30, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 12, 2025 | Jun 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade kernel-rt_debugUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatch-develUpgrade kernel-64kbUpgrade kernel-docs-htmlUpgrade dtb-amlogicUpgrade gfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-default-manUpgrade kernel-symsUpgrade kselftests-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-docsUpgrade gfs2-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-syms-rtUpgrade kernel-kvmsmallUpgrade kernel-syms-azureUpgrade kernel-64kb-optionalUpgrade kernel-obs-qaUpgrade kernel-rt_debug-vdsoUpgrade dtb-appleUpgrade dtb-mediatekUpgrade ocfs2-kmp-rtUpgrade kernel-azure-develUpgrade dlm-kmp-azureUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade dlm-kmp-defaultUpgrade kernel-rt-vdsoUpgrade dtb-marvellUpgrade cluster-md-kmp-defaultUpgrade dtb-qcomUpgrade kernel-default-develUpgrade kernel-rtUpgrade kernel-azure-extraUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade dtb-armUpgrade dtb-socionextUpgrade dtb-apmUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-defaultUpgrade dtb-hisiliconUpgrade kselftests-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-64kb-extraUpgrade kernel-rt-livepatchUpgrade kernel-rt-develUpgrade kernel-defaultUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-source-rtUpgrade dtb-xilinxUpgrade dtb-lgUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-rtUpgrade dtb-rockchipUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade dtb-exynosUpgrade dtb-amazonUpgrade dtb-alteraUpgrade dtb-nvidiaUpgrade reiserfs-kmp-64kbUpgrade kernel-develUpgrade kernel-debug-develUpgrade dtb-renesasUpgrade dlm-kmp-64kbUpgrade kernel-default-baseUpgrade ocfs2-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-debugUpgrade kernel-azureUpgrade dtb-freescaleUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade dtb-amdUpgrade ocfs2-kmp-64kbUpgrade kernel-obs-buildUpgrade dtb-sprdUpgrade kernel-rt-optional | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-152-lowlatencyUpgrade linux-image-aws-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-1084-ibmUpgrade linux-image-5.15.0-1085-nvidia-lowlatencyUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-1085-intel-iotgUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-realtimeUpgrade linux-image-virtual-6.14Upgrade linux-image-virtual-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-realtime-5.15Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-azure-cvmUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-1083-ibmUpgrade linux-image-5.15.0-1090-awsUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-152-generic-lpaeUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-5.15.0-152-fipsUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-5.15.0-1090-realtimeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1090-aws-64kUpgrade linux-image-5.15.0-152-lowlatency-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-oracleUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-intelUpgrade linux-image-virtual-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azure-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-gcp-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-raspiUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-oem-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-realtime-6.14Upgrade linux-image-azureUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-oracle-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1090-gcp-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-6.14Upgrade linux-image-generic-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gke-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-lowlatency-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-1090-aws-fipsUpgrade linux-image-5.15.0-1073-gkeopUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1043-nvidia-tegraUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-gcp-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-raspi-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-5.15Upgrade linux-image-gkeUpgrade linux-image-generic-6.14Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-aws-6.14Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-1054-xilinx-zynqmpUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04bUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-152-genericUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-1090-gcpUpgrade linux-image-ibm-6.8Upgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-5.15Upgrade linux-image-ibmUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-5.15.0-1088-oracleUpgrade linux-image-5.15.0-1083-intel-iot-realtimeUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-5.15.0-1086-kvmUpgrade linux-image-5.15.0-1032-nvidia-tegra-igxUpgrade linux-image-raspi-6.14Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-kvmUpgrade linux-image-xilinxUpgrade linux-image-gke-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-6.14Upgrade linux-image-gkeop-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-azure-fipsUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1043-nvidia-tegra-rtUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1032-nvidia-tegra-igx-rtUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.14.0-1012-azureUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-5.15.0-1087-gkeUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-generic-64kUpgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-1084-raspiUpgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1094-azureUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-5.15.0-1085-nvidiaUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-152-generic-64kUpgrade linux-image-fipsUpgrade linux-image-fips-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-gcpUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-kvm-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub