In the Linux kernel, the following vulnerability has been resolved:
__legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
... or we risk stealing final mntput from sync umount - raising mnt_count after umount(2) has verified that victim is not busy, but before it has set MNT_SYNC_UMOUNT; in that case __legitimize_mnt() doesn't see that it's safe to quietly undo mnt_count increment and leaves dropping the reference to caller, where it'll be a full-blown mntput().
Check under mount_lock is needed; leaving the current one done before taking that makes no sense - it's nowhere near common enough to bother with.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.355-280.664Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.185-126.190Upgrade perfUpgrade bpftool-debuginfo | Jul 9, 2025 | Jun 18, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extraUpgrade bpftoolUpgrade perfUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.141-155.222Upgrade kernel-livepatch-6.12.31-35.92Upgrade python3-perf6.12Upgrade python3-perfUpgrade kernel-libbpfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-libbpf-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel6.12Upgrade perf-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade python3-perf6.12-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade perf6.12Upgrade kernel6.12-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade kernel6.12-debuginfoUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel | Jul 11, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jun 20, 2025 | Jun 18, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelists | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Feb 3, 2026 | Jan 30, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 12, 2025 | Jun 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade kernel-default-optionalUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade dtb-renesasUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-exynosUpgrade kernel-devel-rtUpgrade dtb-amazonUpgrade dtb-nvidiaUpgrade kernel-rt_debug-develUpgrade dtb-alteraUpgrade kernel-64kb-develUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-rt-extraUpgrade kernel-64kb-extraUpgrade dtb-allwinnerUpgrade kernel-default-baseUpgrade kernel-obs-buildUpgrade dtb-amdUpgrade gfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-source-rtUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade dtb-xilinxUpgrade kernel-default-vdsoUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-debugUpgrade dtb-caviumUpgrade kernel-azureUpgrade dtb-broadcomUpgrade kernel-debug-vdsoUpgrade kernel-defaultUpgrade kernel-source-azureUpgrade kselftests-kmp-azureUpgrade kernel-rt-develUpgrade dlm-kmp-rtUpgrade dtb-freescaleUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-rt_debugUpgrade dlm-kmp-azureUpgrade dtb-appleUpgrade dtb-mediatekUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade kernel-64kbUpgrade dtb-marvellUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-extraUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-macrosUpgrade dtb-socionextUpgrade dtb-armUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-64kb-optionalUpgrade dtb-qcomUpgrade dlm-kmp-defaultUpgrade kernel-sourceUpgrade kernel-rt_debug-vdsoUpgrade kernel-docs-htmlUpgrade kernel-docsUpgrade gfs2-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-azure-vdsoUpgrade kernel-default-man | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-raspi-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-5.15.0-1084-raspiUpgrade linux-image-aws-6.14Upgrade linux-image-5.15.0-152-generic-64kUpgrade linux-image-5.15.0-1090-aws-fipsUpgrade linux-image-5.15.0-1083-intel-iot-realtimeUpgrade linux-image-5.15.0-152-lowlatency-64kUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-generic-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-azureUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-5.15.0-1090-gcp-fipsUpgrade linux-image-gke-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-gke-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-xilinxUpgrade linux-image-oracle-6.14Upgrade linux-image-oem-6.14Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-awsUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-5.15.0-1084-ibmUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-virtualUpgrade linux-image-realtimeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-ibm-classicUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-gcpUpgrade linux-image-fips-5.15Upgrade linux-image-fipsUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-realtime-6.14Upgrade linux-image-5.15.0-1090-realtimeUpgrade linux-image-5.15.0-152-fipsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-intelUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-5.15.0-1073-gkeopUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1087-gkeUpgrade linux-image-aws-64k-5.15Upgrade linux-image-ibmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1090-awsUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-generic-64k-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oracleUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-virtual-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-152-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-5.15Upgrade linux-image-gkeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-aws-64kUpgrade linux-image-aws-5.15Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-gkeopUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-5.15.0-152-lowlatencyUpgrade linux-image-5.15.0-1090-gcpUpgrade linux-image-5.15.0-1086-kvmUpgrade linux-image-5.15.0-1085-nvidia-lowlatencyUpgrade linux-image-5.15.0-1054-xilinx-zynqmpUpgrade linux-image-5.15.0-1032-nvidia-tegra-igxUpgrade linux-image-5.15.0-1085-intel-iotgUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-kvm-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-xilinx-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-24.04cUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspiUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1090-aws-64kUpgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-aws-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-6.14Upgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-5.15.0-1085-nvidiaUpgrade linux-image-aws-fips-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-5.15.0-152-generic-lpaeUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-5.15.0-1088-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-20.04dUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-gke-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-5.15.0-1043-nvidia-tegra-rtUpgrade linux-image-5.15.0-1043-nvidia-tegraUpgrade linux-image-5.15.0-1032-nvidia-tegra-igx-rtUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1083-ibmUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1043-oracle-64k | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub