In the Linux kernel, the following vulnerability has been resolved:
__legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
... or we risk stealing final mntput from sync umount - raising mnt_count after umount(2) has verified that victim is not busy, but before it has set MNT_SYNC_UMOUNT; in that case __legitimize_mnt() doesn't see that it's safe to quietly undo mnt_count increment and leaves dropping the reference to caller, where it'll be a full-blown mntput().
Check under mount_lock is needed; leaving the current one done before taking that makes no sense - it's nowhere near common enough to bother with.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade perfUpgrade kernel-livepatch-5.15.185-126.190Upgrade kernel-headersUpgrade python-perfUpgrade kernel-develUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.238-231.953Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-livepatch-4.14.355-280.664Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel | Jul 9, 2025 | Jun 18, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel6.12-debuginfoUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade perf6.12Upgrade kernel-libbpf-staticUpgrade kernel6.12-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade kernel6.12Upgrade perf-debuginfoUpgrade bpftoolUpgrade kernel6.12-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-6.12.31-35.92Upgrade kernel-modules-extraUpgrade perf6.12-debuginfoUpgrade python3-perf6.12Upgrade perfUpgrade python3-perf6.12-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.141-155.222 | Jul 11, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jun 20, 2025 | Jun 18, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libs | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libs | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libs | Feb 3, 2026 | Jan 30, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 12, 2025 | Jun 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade dtb-marvellUpgrade kernel-rt-vdsoUpgrade kernel-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-azure-vdsoUpgrade kernel-default-manUpgrade gfs2-kmp-64kbUpgrade kernel-docsUpgrade dtb-amlogicUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-develUpgrade dtb-apmUpgrade dtb-armUpgrade dtb-socionextUpgrade kernel-macrosUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debugUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-rtUpgrade kernel-azure-develUpgrade dtb-mediatekUpgrade kernel-default-base-rebuildUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade dtb-appleUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade kernel-syms-rtUpgrade dtb-qcomUpgrade dlm-kmp-defaultUpgrade kernel-64kb-optionalUpgrade dlm-kmp-azureUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-rtUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-rt-develUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade dtb-amdUpgrade kernel-obs-buildUpgrade dtb-allwinnerUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-develUpgrade dtb-caviumUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade dtb-lgUpgrade dtb-hisiliconUpgrade dlm-kmp-rtUpgrade kernel-debugUpgrade dtb-xilinxUpgrade dtb-freescaleUpgrade kernel-azure-optionalUpgrade dtb-renesasUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade kernel-debug-develUpgrade dtb-rockchipUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-devel-rtUpgrade dtb-nvidiaUpgrade dtb-exynosUpgrade dtb-amazonUpgrade dtb-alteraUpgrade kernel-rt_debug-develUpgrade kernel-defaultUpgrade gfs2-kmp-azureUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-azure | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-64k-6.14Upgrade linux-image-lowlatency-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-6.14Upgrade linux-image-azure-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-1090-aws-fipsUpgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-1073-gkeopUpgrade linux-image-5.15.0-1090-awsUpgrade linux-image-5.15.0-152-generic-lpaeUpgrade linux-image-5.15.0-1083-ibmUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-realtime-5.15Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-aws-fips-6.8Upgrade linux-image-gkeUpgrade linux-image-virtual-6.14Upgrade linux-image-5.15.0-1085-intel-iotgUpgrade linux-image-gcp-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-5.15.0-1054-xilinx-zynqmpUpgrade linux-image-oracleUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-azure-fips-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-aws-6.14Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gke-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1090-gcp-fipsUpgrade linux-image-azureUpgrade linux-image-aws-fipsUpgrade linux-image-aws-fips-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-generic-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-oracle-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-1043-nvidia-tegraUpgrade linux-image-virtual-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-generic-6.14Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-5.15.0-152-lowlatencyUpgrade linux-image-aws-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-realtime-6.14Upgrade linux-image-awsUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-152-fipsUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1090-realtimeUpgrade linux-image-5.15.0-152-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-5.15.0-1085-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-raspi-6.8Upgrade linux-image-realtimeUpgrade linux-image-raspi-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1084-ibmUpgrade linux-image-5.15.0-1090-aws-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-1032-nvidia-tegra-igx-rtUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1043-nvidia-tegra-rtUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-5.15.0-152-generic-64kUpgrade linux-image-5.15.0-1087-gkeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-5.15.0-1085-nvidiaUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-azure-fipsUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-5.15.0-152-genericUpgrade linux-image-5.15.0-1088-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-1090-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1032-nvidia-tegra-igxUpgrade linux-image-5.15.0-1084-raspiUpgrade linux-image-xilinxUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-aws-6.8Upgrade linux-image-5.15.0-1086-kvmUpgrade linux-image-oem-6.14Upgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-nvidia-5.15Upgrade linux-image-5.15.0-1083-intel-iot-realtimeUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-fips-5.15Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gcp-fipsUpgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-kvm-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1043-oracle-64k | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub