In the Linux kernel, the following vulnerability has been resolved:
__legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
... or we risk stealing final mntput from sync umount - raising mnt_count after umount(2) has verified that victim is not busy, but before it has set MNT_SYNC_UMOUNT; in that case __legitimize_mnt() doesn't see that it's safe to quietly undo mnt_count increment and leaves dropping the reference to caller, where it'll be a full-blown mntput().
Check under mount_lock is needed; leaving the current one done before taking that makes no sense - it's nowhere near common enough to bother with.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-livepatch-4.14.355-280.664Upgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.185-126.190 | Jul 9, 2025 | Jun 18, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel6.12-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel6.12-modules-extraUpgrade perf6.12Upgrade kernel-modules-extra-commonUpgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel6.12Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-libbpfUpgrade python3-perf6.12Upgrade perf6.12-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade python3-perf6.12-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.141-155.222Upgrade kernel-livepatch-6.12.31-35.92Upgrade kernel-toolsUpgrade python3-perf | Jul 11, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jun 20, 2025 | Jun 18, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perf | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel | Feb 3, 2026 | Jan 30, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 12, 2025 | Jun 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade kselftests-kmp-defaultUpgrade dtb-socionextUpgrade kernel-macrosUpgrade reiserfs-kmp-rtUpgrade dtb-apmUpgrade kernel-docs-htmlUpgrade kernel-64kb-optionalUpgrade dtb-amlogicUpgrade kernel-syms-azureUpgrade kernel-azure-vdsoUpgrade kernel-default-manUpgrade gfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-rt_debugUpgrade kernel-docsUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-64kbUpgrade kernel-sourceUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade dtb-mediatekUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade kernel-default-develUpgrade dlm-kmp-azureUpgrade dtb-appleUpgrade kernel-symsUpgrade dtb-qcomUpgrade dtb-armUpgrade kernel-kvmsmall-develUpgrade dtb-marvellUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade gfs2-kmp-rtUpgrade dtb-exynosUpgrade dtb-freescaleUpgrade dtb-caviumUpgrade kernel-azureUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade kernel-default-baseUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-develUpgrade dtb-amazonUpgrade dtb-alteraUpgrade dtb-nvidiaUpgrade kernel-rt_debug-develUpgrade kernel-devel-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade dlm-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade dtb-rockchipUpgrade dtb-renesasUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade kernel-debug-develUpgrade dtb-amdUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-rt-livepatchUpgrade kernel-rt-develUpgrade kselftests-kmp-azureUpgrade kernel-debug-vdsoUpgrade dtb-broadcomUpgrade kernel-defaultUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-debug | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1090-aws-64kUpgrade linux-image-5.15.0-1090-realtimeUpgrade linux-image-oem-24.04cUpgrade linux-image-5.15.0-152-fipsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-realtime-6.14Upgrade linux-image-5.15.0-152-lowlatency-64kUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-5.15.0-152-generic-lpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1090-awsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-realtime-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-intelUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-gcp-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-5.15.0-1083-ibmUpgrade linux-image-generic-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-5.15Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-awsUpgrade linux-image-5.15.0-1090-gcp-fipsUpgrade linux-image-aws-fips-5.15Upgrade linux-image-oracle-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azureUpgrade linux-image-gke-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1054-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-ibm-5.15Upgrade linux-image-generic-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-azure-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-aws-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-5.15.0-1085-nvidia-lowlatencyUpgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-152-lowlatencyUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-5.15.0-1043-nvidia-tegraUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gke-6.8Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-intel-iotgUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-5.15.0-1084-ibmUpgrade linux-image-aws-64k-6.14Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-raspi-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-raspiUpgrade linux-image-azure-cvmUpgrade linux-image-xilinx-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-azure-fips-5.15Upgrade linux-image-generic-64k-6.14Upgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-5.15Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1073-gkeopUpgrade linux-image-gkeUpgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1085-intel-iotgUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-aws-6.14Upgrade linux-image-5.15.0-1090-aws-fipsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1088-oracleUpgrade linux-image-generic-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-6.14Upgrade linux-image-xilinxUpgrade linux-image-ibmUpgrade linux-image-fipsUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-fips-5.15Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-virtualUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-raspi-realtimeUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-5.15.0-1083-intel-iot-realtimeUpgrade linux-image-5.15.0-152-genericUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-5.15.0-1032-nvidia-tegra-igxUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1086-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-1090-gcpUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1084-raspiUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-aws-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1032-nvidia-tegra-igx-rtUpgrade linux-image-azure-fipsUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1043-nvidia-tegra-rtUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1085-nvidiaUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-152-generic-64kUpgrade linux-image-5.15.0-1087-gkeUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-22.04 | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub