Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-40203

listmount: don't call path_put() under namespace semaphore

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: listmount: don't call path_put() under namespace semaphore Massage listmount() and make sure we don't call path_put() under the namespace semaphore. If we put the last reference we're fscked.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • b4c2bea8ceaa50cd42a8f73667389d801a3ecf2d to < 659874b7ee4976ad9ce476e07fd36bc67b3537f1affected
  • b4c2bea8ceaa50cd42a8f73667389d801a3ecf2d to < 9c80da26fda2fdcaac7f92b5908875b3108830ffaffected
  • b4c2bea8ceaa50cd42a8f73667389d801a3ecf2d to < c1f86d0ac322c7e77f6f8dbd216c65d39358ffc0affected

Linux Linux

Default version status: affected

  • 6.8affected
  • 0 to < 6.8unaffected
  • 6.12.54 to ≤ 6.12.*unaffected
  • 6.17.4 to ≤ 6.17.*unaffected
  • 6.18 to ≤ *unaffected

References