In the Linux kernel, the following vulnerability has been resolved:
__legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
... or we risk stealing final mntput from sync umount - raising mnt_count after umount(2) has verified that victim is not busy, but before it has set MNT_SYNC_UMOUNT; in that case __legitimize_mnt() doesn't see that it's safe to quietly undo mnt_count increment and leaves dropping the reference to caller, where it'll be a full-blown mntput().
Check under mount_lock is needed; leaving the current one done before taking that makes no sense - it's nowhere near common enough to bother with.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-livepatch-5.15.185-126.190Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.355-280.664Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.238-231.953Upgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64 | Jul 9, 2025 | Jun 18, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernel-livepatch-6.12.31-35.92Upgrade python3-perf6.12Upgrade kernel-tools-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade perf6.12-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade perfUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.141-155.222Upgrade bpftoolUpgrade python3-perfUpgrade kernel6.12Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel6.12-modules-extraUpgrade perf6.12Upgrade kernel-debuginfo-common-x86_64 | Jul 11, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jun 20, 2025 | Jun 18, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libs | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Feb 3, 2026 | Jan 30, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 12, 2025 | Jun 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade cluster-md-kmp-64kbUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade dtb-xilinxUpgrade kernel-defaultUpgrade kernel-rt-develUpgrade kernel-rt-livepatchUpgrade dlm-kmp-64kbUpgrade dtb-renesasUpgrade dtb-rockchipUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-source-rtUpgrade kernel-rt-extraUpgrade kernel-debug-develUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade dtb-nvidiaUpgrade kernel-devel-rtUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-alteraUpgrade kernel-rt_debug-develUpgrade kernel-default-baseUpgrade dtb-amazonUpgrade dtb-exynosUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade ocfs2-kmp-64kbUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade kernel-default-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-default-vdsoUpgrade kernel-source-azureUpgrade kernel-source-vanillaUpgrade dlm-kmp-rtUpgrade dtb-amdUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-azureUpgrade dtb-caviumUpgrade kernel-azureUpgrade dtb-broadcomUpgrade gfs2-kmp-azureUpgrade dtb-freescaleUpgrade kernel-debugUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade dtb-mediatekUpgrade kernel-azure-develUpgrade dtb-appleUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-rt_debugUpgrade kernel-syms-rtUpgrade dtb-apmUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-defaultUpgrade dtb-socionextUpgrade dtb-armUpgrade kernel-macrosUpgrade dtb-marvellUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-extraUpgrade cluster-md-kmp-azureUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-docs-htmlUpgrade gfs2-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-64kb-optionalUpgrade dlm-kmp-defaultUpgrade dtb-qcomUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-symsUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-default-base-rebuild | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-aws-64k-6.14Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-azure-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-awsUpgrade linux-image-aws-fipsUpgrade linux-image-gke-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-aws-fips-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-oracle-6.14Upgrade linux-image-raspi-6.8Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-generic-64k-6.14Upgrade linux-image-aws-lts-24.04Upgrade linux-image-virtual-5.15Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-5.15.0-152-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1084-ibmUpgrade linux-image-5.15.0-1090-aws-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtime-6.14Upgrade linux-image-5.15.0-1090-realtimeUpgrade linux-image-intelUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-24.04cUpgrade linux-image-5.15.0-152-fipsUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-generic-64k-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-realtimeUpgrade linux-image-xilinx-6.8Upgrade linux-image-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-5.15.0-1090-gcp-fipsUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-aws-fips-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-aws-64kUpgrade linux-image-5.15.0-152-lowlatencyUpgrade linux-image-5.15.0-1085-nvidia-lowlatencyUpgrade linux-image-aws-5.15Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-azure-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-152-generic-lpaeUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1083-ibmUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-gcp-64kUpgrade linux-image-lowlatency-5.15Upgrade linux-image-5.15.0-1054-xilinx-zynqmpUpgrade linux-image-azure-fips-5.15Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-azureUpgrade linux-image-generic-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-5.15.0-1085-intel-iotgUpgrade linux-image-5.15.0-1073-gkeopUpgrade linux-image-aws-6.14Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-5.15.0-1090-aws-fipsUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1043-nvidia-tegraUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-gcp-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-azure-cvmUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-1090-awsUpgrade linux-image-gke-6.8Upgrade linux-image-virtual-6.14Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-virtual-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-gke-64k-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1094-azureUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-nvidia-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-gkeopUpgrade linux-image-ibmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-1090-gcpUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1086-kvmUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-raspi-6.14Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1032-nvidia-tegra-igxUpgrade linux-image-genericUpgrade linux-image-azure-lts-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-5.15.0-152-generic-64kUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-5.15.0-1085-nvidiaUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-5.15.0-1083-intel-iot-realtimeUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-kvm-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1032-nvidia-tegra-igx-rtUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-5.15.0-1043-nvidia-tegra-rtUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oem-6.14Upgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-1084-raspiUpgrade linux-image-xilinxUpgrade linux-image-gkeop-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-5.15.0-1087-gkeUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-gcp-fipsUpgrade linux-image-ibm-classicUpgrade linux-image-gcpUpgrade linux-image-fips-5.15Upgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-virtualUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-fipsUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-5.15.0-152-genericUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-5.15.0-1088-oracleUpgrade linux-image-nvidia-tegra-rt-5.15 | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub