Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-38498

do_change_type(): refuse to operate on unmounted/not ours mounts

Description

In the Linux kernel, the following vulnerability has been resolved: do_change_type(): refuse to operate on unmounted/not ours mounts Ensure that propagation settings can only be changed for mounts located in the caller's mount namespace. This change aligns permission checking with the rest of mount(2).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 07b20889e3052c7e77d6a6a54e7e83446eb1ba84 to < 787937c4e373f1722c4343e5a5a4eb0f8543e589affected
  • 07b20889e3052c7e77d6a6a54e7e83446eb1ba84 to < c7d11fdf8e5db5f34a6c062c7e6ba3a0971879d2affected
  • 07b20889e3052c7e77d6a6a54e7e83446eb1ba84 to < 432a171d60056489270c462e651e6c3a13f855b1affected
  • 07b20889e3052c7e77d6a6a54e7e83446eb1ba84 to < 064014f7812744451d5d0592f3d2bcd727f2ee93affected
  • 07b20889e3052c7e77d6a6a54e7e83446eb1ba84 to < 4f091ad0862b02dc42a19a120b7048de848561f8affected
  • 07b20889e3052c7e77d6a6a54e7e83446eb1ba84 to < 9c1ddfeb662b668fff69c5f1cfdd9f5d23d55d23affected
  • 07b20889e3052c7e77d6a6a54e7e83446eb1ba84 to < 19554c79a2095ddde850906a067915c1ef3a4114affected
  • 07b20889e3052c7e77d6a6a54e7e83446eb1ba84 to < 12f147ddd6de7382dad54812e65f3f08d05809fcaffected

Linux Linux

Default version status: affected

  • 2.6.15affected
  • 0 to < 2.6.15unaffected
  • 5.4.295 to ≤ 5.4.*unaffected
  • 5.10.239 to ≤ 5.10.*unaffected
  • 5.15.186 to ≤ 5.15.*unaffected
  • 6.1.142 to ≤ 6.1.*unaffected
  • 6.6.94 to ≤ 6.6.*unaffected
  • 6.12.34 to ≤ 6.12.*unaffected
  • 6.15.3 to ≤ 6.15.*unaffected
  • 6.16 to ≤ *unaffected

References