Riskcovery

CVE-2025-38247

userns and mnt_idmap leak in open_tree_attr(2)

State
Published
Severity
Not scored
Published
Jul 9, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

userns and mnt_idmap leak in open_tree_attr(2)

Once want_mount_setattr() has returned a positive, it does require finish_mount_kattr() to release ->mnt_userns. Failing do_mount_setattr() does not change that.

As the result, we can end up leaking userns and possibly mnt_idmap as well.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • c4a16820d90199409c9bf01c4f794e1e9e8d8fd8 to before 142db4e76110dd80239f4e79810f85ea1735ad60Affected
  • c4a16820d90199409c9bf01c4f794e1e9e8d8fd8 to before 0748e553df0225754c316a92af3a77fdc057b358Affected
LinuxLinux
  • 6.15Affected
  • before 6.15Not affected
  • 6.15.5 through 6.15.*Not affected
  • 6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.