In the Linux kernel, the following vulnerability has been resolved:
__legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
... or we risk stealing final mntput from sync umount - raising mnt_count after umount(2) has verified that victim is not busy, but before it has set MNT_SYNC_UMOUNT; in that case __legitimize_mnt() doesn't see that it's safe to quietly undo mnt_count increment and leaves dropping the reference to caller, where it'll be a full-blown mntput().
Check under mount_lock is needed; leaving the current one done before taking that makes no sense - it's nowhere near common enough to bother with.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade python-perfUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.185-126.190Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-livepatch-4.14.355-280.664Upgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel | Jul 9, 2025 | Jun 18, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.141-155.222Upgrade python3-perfUpgrade kernel6.12-debuginfo-common-x86_64Upgrade python3-perf6.12-debuginfoUpgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade perfUpgrade kernel6.12Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade python3-perf6.12Upgrade perf6.12-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade bpftoolUpgrade kernel-livepatch-6.12.31-35.92Upgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade perf6.12Upgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfoUpgrade kernel6.12-debuginfoUpgrade bpftool-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64 | Jul 11, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jun 20, 2025 | Jun 18, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelists | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-tools | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Feb 3, 2026 | Jan 30, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 12, 2025 | Jun 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade kernel-kvmsmallUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade dtb-amlogicUpgrade kernel-64kbUpgrade kernel-rt_debug-vdsoUpgrade dtb-qcomUpgrade kernel-docs-htmlUpgrade kernel-64kb-optionalUpgrade kernel-syms-rtUpgrade kernel-default-base-rebuildUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-default-manUpgrade kernel-docsUpgrade dtb-apmUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-obs-qaUpgrade dtb-appleUpgrade dtb-mediatekUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade dtb-marvellUpgrade kernel-zfcpdumpUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-azure-develUpgrade dtb-armUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade kernel-macrosUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rtUpgrade dtb-amazonUpgrade dtb-exynosUpgrade dtb-broadcomUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-renesasUpgrade kernel-develUpgrade kernel-debug-develUpgrade dtb-rockchipUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-default-vdsoUpgrade dtb-xilinxUpgrade dtb-lgUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade dtb-hisiliconUpgrade dlm-kmp-rtUpgrade kernel-source-azureUpgrade kernel-rt-develUpgrade kernel-defaultUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-64kb-develUpgrade dtb-nvidiaUpgrade kernel-devel-rtUpgrade kernel-source-rtUpgrade kernel-rt-livepatchUpgrade dtb-alteraUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-obs-buildUpgrade dtb-amdUpgrade reiserfs-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-default-livepatchUpgrade kernel-default-baseUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade kernel-default-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-default-optionalUpgrade kernel-debugUpgrade kernel-azureUpgrade dtb-freescaleUpgrade dtb-cavium | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1085-nvidiaUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-oracle-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-raspi-6.14Upgrade linux-image-5.15.0-1032-nvidia-tegra-igxUpgrade linux-image-5.15.0-1086-kvmUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-1090-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-xilinxUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-generic-64kUpgrade linux-image-azure-fipsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-152-genericUpgrade linux-image-5.15.0-1088-oracleUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-5.15.0-1032-nvidia-tegra-igx-rtUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1083-intel-iot-realtimeUpgrade linux-image-ibmUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-5.15.0-1084-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1087-gkeUpgrade linux-image-genericUpgrade linux-image-5.15.0-1043-nvidia-tegra-rtUpgrade linux-image-5.15.0-152-generic-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-fipsUpgrade linux-image-gcpUpgrade linux-image-aws-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-6.14Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-fips-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-oem-22.04Upgrade linux-image-nvidiaUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1090-aws-fipsUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1084-ibmUpgrade linux-image-5.15.0-1090-aws-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-gcp-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-generic-64k-6.14Upgrade linux-image-ibm-5.15Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-5.15.0-1073-gkeopUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-1085-intel-iotgUpgrade linux-image-gke-6.8Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-5.15.0-1090-gcp-fipsUpgrade linux-image-azure-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-raspi-6.8Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-5.15.0-152-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-152-fipsUpgrade linux-image-5.15.0-1090-realtimeUpgrade linux-image-oem-24.04cUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-1043-nvidia-tegraUpgrade linux-image-oem-20.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-aws-64kUpgrade linux-image-5.15.0-152-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-152-generic-lpaeUpgrade linux-image-lowlatency-5.15Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-5.15.0-1090-awsUpgrade linux-image-5.15.0-1083-ibmUpgrade linux-image-realtime-6.8.1Upgrade linux-image-realtime-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-realtimeUpgrade linux-image-realtime-6.14Upgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-generic-64k-5.15Upgrade linux-image-gcp-6.14Upgrade linux-image-azure-fips-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gke-64kUpgrade linux-image-azureUpgrade linux-image-oracle-6.14Upgrade linux-image-generic-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-awsUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-aws-fips-5.15Upgrade linux-image-xilinx-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1085-nvidia-lowlatencyUpgrade linux-image-5.15.0-1054-xilinx-zynqmpUpgrade linux-image-virtual-6.14Upgrade linux-image-oem-22.04dUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-gkeUpgrade linux-image-raspi-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-aws-5.15 | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub