In the Linux kernel, the following vulnerability has been resolved:
__legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
... or we risk stealing final mntput from sync umount - raising mnt_count after umount(2) has verified that victim is not busy, but before it has set MNT_SYNC_UMOUNT; in that case __legitimize_mnt() doesn't see that it's safe to quietly undo mnt_count increment and leaves dropping the reference to caller, where it'll be a full-blown mntput().
Check under mount_lock is needed; leaving the current one done before taking that makes no sense - it's nowhere near common enough to bother with.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.185-126.190Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-tools-develUpgrade kernel-livepatch-4.14.355-280.664Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64 | Jul 9, 2025 | Jun 18, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-livepatch-6.12.31-35.92Upgrade python3-perf6.12Upgrade kernel-libbpf-debuginfoUpgrade kernel-develUpgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade python3-perf6.12-debuginfoUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-livepatch-6.1.141-155.222Upgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-libbpfUpgrade kernel6.12Upgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfoUpgrade perf6.12Upgrade python3-perf-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel | Jul 11, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jun 20, 2025 | Jun 18, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelists | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libs | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Feb 3, 2026 | Jan 30, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 12, 2025 | Jun 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade kernel-azureUpgrade dtb-alteraUpgrade dtb-amazonUpgrade cluster-md-kmp-64kbUpgrade dtb-exynosUpgrade gfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-source-vanillaUpgrade kernel-64kb-develUpgrade kernel-defaultUpgrade kernel-rt-develUpgrade kernel-azure-optionalUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-devel-rtUpgrade dtb-amdUpgrade kernel-obs-buildUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade reiserfs-kmp-azureUpgrade kernel-default-baseUpgrade kernel-rt_debug-develUpgrade dtb-nvidiaUpgrade kernel-develUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-renesasUpgrade kernel-default-optionalUpgrade kernel-64kb-extraUpgrade kernel-rt-optionalUpgrade dtb-rockchipUpgrade kernel-rt-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-default-vdsoUpgrade dtb-sprdUpgrade dtb-xilinxUpgrade kernel-default-livepatch-develUpgrade kernel-debug-develUpgrade kselftests-kmp-azureUpgrade dtb-broadcomUpgrade kernel-debug-vdsoUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade kernel-debugUpgrade dlm-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-extraUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-azure-develUpgrade dtb-appleUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-symsUpgrade dtb-marvellUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-default-manUpgrade kernel-azure-vdsoUpgrade kernel-sourceUpgrade kernel-rt_debug-vdsoUpgrade kernel-docs-htmlUpgrade kernel-docsUpgrade gfs2-kmp-64kbUpgrade dtb-amlogicUpgrade dtb-qcomUpgrade dlm-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-64kb-optionalUpgrade kernel-rt-livepatch-develUpgrade kernel-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade kernel-rt_debugUpgrade dtb-mediatekUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade dtb-armUpgrade dtb-apmUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-defaultUpgrade dtb-socionextUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-rt | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1088-oracleUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-1083-intel-iot-realtimeUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-1090-gcpUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1086-kvmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-raspi-6.14Upgrade linux-image-5.15.0-1032-nvidia-tegra-igxUpgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-24.04bUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-5.15.0-1043-nvidia-tegra-rtUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1032-nvidia-tegra-igx-rtUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-oem-6.14Upgrade linux-image-generic-64kUpgrade linux-image-xilinxUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-1084-raspiUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-azure-fips-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-gcp-fipsUpgrade linux-image-fips-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-virtualUpgrade linux-image-fipsUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-6.8Upgrade linux-image-5.15.0-1087-gkeUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-gkeopUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-azure-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-152-generic-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1094-azureUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-5.15.0-1085-nvidiaUpgrade linux-image-gke-5.15Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-oem-22.04aUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-5.15.0-152-genericUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-genericUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-ibmUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-1084-ibmUpgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-azure-5.15Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-azure-fips-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-xilinx-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1090-aws-fipsUpgrade linux-image-5.15.0-1085-intel-iotgUpgrade linux-image-5.15.0-1073-gkeopUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-aws-6.14Upgrade linux-image-aws-64kUpgrade linux-image-5.15.0-1090-realtimeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-virtual-5.15Upgrade linux-image-realtimeUpgrade linux-image-raspi-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-5.15.0-1043-nvidia-tegraUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gcp-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-5.15.0-152-generic-lpaeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-realtime-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1090-awsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1083-ibmUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-nvidia-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-1085-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-6.14Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-6.14Upgrade linux-image-aws-5.15Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-5.15.0-152-lowlatencyUpgrade linux-image-5.15.0-1054-xilinx-zynqmpUpgrade linux-image-ibm-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-152-lowlatency-64kUpgrade linux-image-5.15.0-152-fipsUpgrade linux-image-oem-24.04cUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-realtime-6.14Upgrade linux-image-5.15.0-1090-aws-64kUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-azureUpgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-1090-gcp-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-5.15Upgrade linux-image-gke-64kUpgrade linux-image-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-aws-64k-6.14Upgrade linux-image-lowlatency-6.8Upgrade linux-image-oem-24.04 | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub