VYPR
Medium severity5.5NVD Advisory· Published Jun 18, 2025· Updated May 12, 2026

CVE-2025-38058

CVE-2025-38058

Description

In the Linux kernel, the following vulnerability has been resolved:

__legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock

... or we risk stealing final mntput from sync umount - raising mnt_count after umount(2) has verified that victim is not busy, but before it has set MNT_SYNC_UMOUNT; in that case __legitimize_mnt() doesn't see that it's safe to quietly undo mnt_count increment and leaves dropping the reference to caller, where it'll be a full-blown mntput().

Check under mount_lock is needed; leaving the current one done before taking that makes no sense - it's nowhere near common enough to bother with.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

131

Patches

Vulnerability mechanics

References

11

News mentions

0

No linked articles in our index yet.