In the Linux kernel, the following vulnerability has been resolved:
__legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
... or we risk stealing final mntput from sync umount - raising mnt_count after umount(2) has verified that victim is not busy, but before it has set MNT_SYNC_UMOUNT; in that case __legitimize_mnt() doesn't see that it's safe to quietly undo mnt_count increment and leaves dropping the reference to caller, where it'll be a full-blown mntput().
Check under mount_lock is needed; leaving the current one done before taking that makes no sense - it's nowhere near common enough to bother with.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.185-126.190Upgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.238-231.953Upgrade kernelUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.355-280.664Upgrade bpftool | Jul 9, 2025 | Jun 18, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12Upgrade kernel-livepatch-6.12.31-35.92Upgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf6.12Upgrade perf6.12-debuginfoUpgrade kernel-livepatch-6.1.141-155.222Upgrade python3-perf6.12-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-libbpf-debuginfoUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel6.12-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade perf6.12Upgrade kernel-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-modules-extraUpgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade python3-perf-debuginfo | Jul 11, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jun 20, 2025 | Jun 18, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libs | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftool | Feb 3, 2026 | Jan 30, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 12, 2025 | Jun 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade dtb-nvidiaUpgrade kernel-devel-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-source-vanillaUpgrade dtb-alteraUpgrade dtb-rockchipUpgrade dtb-amazonUpgrade dtb-xilinxUpgrade kernel-default-vdsoUpgrade kernel-source-rtUpgrade kernel-rt-livepatchUpgrade kernel-rt-develUpgrade kselftests-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-azure-optionalUpgrade kernel-defaultUpgrade gfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-debugUpgrade dtb-broadcomUpgrade kernel-default-livepatch-develUpgrade kernel-azureUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade dtb-lgUpgrade kernel-default-optionalUpgrade dtb-hisiliconUpgrade kernel-rt-optionalUpgrade kernel-source-azureUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade dtb-renesasUpgrade dtb-allwinnerUpgrade dtb-amdUpgrade kernel-default-baseUpgrade kernel-default-livepatchUpgrade kernel-rt-extraUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-azureUpgrade kernel-debug-develUpgrade reiserfs-kmp-azureUpgrade kernel-azure-develUpgrade dlm-kmp-azureUpgrade kernel-default-extraUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade kernel-devel-azureUpgrade ocfs2-kmp-rtUpgrade dtb-appleUpgrade dtb-mediatekUpgrade dtb-marvellUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-extraUpgrade kernel-rtUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-64kb-optionalUpgrade dtb-qcomUpgrade dlm-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-manUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-docs-htmlUpgrade kernel-docsUpgrade kselftests-kmp-rtUpgrade kernel-symsUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade dtb-armUpgrade dtb-apmUpgrade kernel-macros | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-fipsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1085-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1083-intel-iot-realtimeUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-5.15.0-1088-oracleUpgrade linux-image-5.15.0-152-genericUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-oem-24.04bUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-raspi-6.14Upgrade linux-image-5.15.0-1032-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-1090-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-fips-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-azure-fips-6.8Upgrade linux-image-5.15.0-1086-kvmUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1032-nvidia-tegra-igx-rtUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-5.15.0-1043-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-152-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-5.15.0-1084-raspiUpgrade linux-image-oem-6.14Upgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-generic-6.8Upgrade linux-image-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcpUpgrade linux-image-gcp-fipsUpgrade linux-image-fips-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-xilinxUpgrade linux-image-ibm-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-5.15.0-1087-gkeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-aws-6.14Upgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-virtual-6.14Upgrade linux-image-5.15.0-152-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1090-gcp-fipsUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-1043-nvidia-tegraUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-virtual-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-generic-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-6.8Upgrade linux-image-oracle-6.14Upgrade linux-image-gke-64kUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-5.15.0-1084-ibmUpgrade linux-image-raspi-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-intelUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-5.15.0-152-fipsUpgrade linux-image-5.15.0-1090-realtimeUpgrade linux-image-5.15.0-1090-aws-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-azureUpgrade linux-image-gcp-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-1085-nvidia-lowlatencyUpgrade linux-image-5.15.0-1054-xilinx-zynqmpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-152-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-gkeUpgrade linux-image-generic-6.14Upgrade linux-image-generic-64k-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-azure-fips-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-xilinx-6.8Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-1073-gkeopUpgrade linux-image-5.15.0-1085-intel-iotgUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-1090-aws-fipsUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-5.15.0-152-generic-lpaeUpgrade linux-image-gcp-5.15Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-azure-6.14Upgrade linux-image-5.15.0-1090-awsUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-1083-ibmUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-20.04cUpgrade linux-image-realtime-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-5.15 | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub