In the Linux kernel, the following vulnerability has been resolved:
__legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
... or we risk stealing final mntput from sync umount - raising mnt_count after umount(2) has verified that victim is not busy, but before it has set MNT_SYNC_UMOUNT; in that case __legitimize_mnt() doesn't see that it's safe to quietly undo mnt_count increment and leaves dropping the reference to caller, where it'll be a full-blown mntput().
Check under mount_lock is needed; leaving the current one done before taking that makes no sense - it's nowhere near common enough to bother with.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade perfUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.15.185-126.190Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-tools-develUpgrade kernel-livepatch-4.14.355-280.664Upgrade bpftoolUpgrade kernel-tools | Jul 9, 2025 | Jun 18, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernelUpgrade perf6.12Upgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.12.31-35.92Upgrade bpftoolUpgrade kernel6.12Upgrade kernel-tools-develUpgrade kernel-libbpfUpgrade python3-perfUpgrade kernel-livepatch-6.1.141-155.222Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-debuginfoUpgrade kernel-toolsUpgrade kernel6.12-debuginfo-common-x86_64Upgrade python3-perf6.12-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade python3-perf6.12Upgrade perf6.12-debuginfoUpgrade perf | Jul 11, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jun 20, 2025 | Jun 18, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftool | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelists | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Feb 3, 2026 | Jan 30, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 12, 2025 | Jun 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade dtb-exynosUpgrade dtb-nvidiaUpgrade dtb-amazonUpgrade kernel-64kb-develUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade kernel-azure-optionalUpgrade kernel-source-rtUpgrade dtb-freescaleUpgrade kselftests-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-develUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade dtb-renesasUpgrade dtb-rockchipUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-default-optionalUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-rt-extraUpgrade dtb-amdUpgrade reiserfs-kmp-azureUpgrade kernel-default-baseUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade dtb-xilinxUpgrade kernel-default-vdsoUpgrade dtb-lgUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade kernel-rt-optionalUpgrade dtb-hisiliconUpgrade kernel-default-livepatch-develUpgrade kernel-source-azureUpgrade kernel-source-vanillaUpgrade dlm-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade ocfs2-kmp-rtUpgrade kernel-azure-develUpgrade dlm-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-sourceUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-extraUpgrade cluster-md-kmp-azureUpgrade dtb-marvellUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-vdsoUpgrade dtb-amlogicUpgrade dtb-armUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-macrosUpgrade kselftests-kmp-defaultUpgrade dtb-socionextUpgrade dtb-apmUpgrade kernel-symsUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-rtUpgrade kernel-default-extraUpgrade dtb-appleUpgrade dtb-mediatekUpgrade kernel-syms-azureUpgrade kernel-64kb-optionalUpgrade dtb-qcom | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1085-intel-iotgUpgrade linux-image-5.15.0-1073-gkeopUpgrade linux-image-azure-cvmUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-generic-64k-6.14Upgrade linux-image-oem-20.04cUpgrade linux-image-gcp-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-virtual-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-aws-6.14Upgrade linux-image-5.15.0-1043-nvidia-tegraUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-1084-ibmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-realtimeUpgrade linux-image-virtual-5.15Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-5.15.0-1090-aws-64kUpgrade linux-image-5.15.0-1090-aws-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1085-nvidia-lowlatencyUpgrade linux-image-intelUpgrade linux-image-aws-fips-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-oem-22.04dUpgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1090-realtimeUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-5.15.0-1054-xilinx-zynqmpUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-6.14Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oracle-6.14Upgrade linux-image-gke-64kUpgrade linux-image-oracleUpgrade linux-image-aws-fips-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-azureUpgrade linux-image-5.15.0-1090-gcp-fipsUpgrade linux-image-generic-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-azure-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-aws-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-awsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-152-lowlatencyUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-azure-6.14Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-gkeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-realtime-6.8.1Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-5.15.0-1083-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-raspiUpgrade linux-image-5.15.0-152-generic-lpaeUpgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-1090-awsUpgrade linux-image-gke-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-realtime-6.14Upgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-152-fipsUpgrade linux-image-5.15.0-152-lowlatency-64kUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-azure-fips-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-generic-64k-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-azure-fips-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-virtualUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1086-kvmUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1090-gcpUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-kvm-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-5.15.0-1043-nvidia-tegra-rtUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1085-nvidiaUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-ibm-classicUpgrade linux-image-aws-6.8Upgrade linux-image-fipsUpgrade linux-image-fips-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-5.15.0-1032-nvidia-tegra-igx-rtUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-ibmUpgrade linux-image-5.15.0-152-genericUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-5.15.0-1083-intel-iot-realtimeUpgrade linux-image-5.15.0-1088-oracleUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-1084-raspiUpgrade linux-image-xilinxUpgrade linux-image-oem-6.14Upgrade linux-image-gke-5.15Upgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-152-generic-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-5.15.0-1087-gkeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-raspi-6.14Upgrade linux-image-5.15.0-1032-nvidia-tegra-igx | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub