CVE-2025-38247

MEDIUM

Linux Kernel 6.15-6.15.5 - Use-After-Free in open_tree_attr Mount Handling

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: userns and mnt_idmap leak in open_tree_attr(2) Once want_mount_setattr() has returned a positive, it does require finish_mount_kattr() to release ->mnt_userns. Failing do_mount_setattr() does not change that. As the result, we can end up leaking userns and possibly mnt_idmap as well.

References (2)

Core 2

Core References

Patch

https://git.kernel.org/stable/c/142db4e76110dd80239f4e79810f85ea1735ad60

Patch

https://git.kernel.org/stable/c/0748e553df0225754c316a92af3a77fdc057b358

Scores

CVSS v3 5.5

EPSS 0.0012

EPSS Percentile 2.2%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published

Products (9)

linux/Kernel 6.15.0 - 6.15.5linux

Linux/Linux < 6.15

Linux/Linux 6.15

Linux/Linux 6.15.5 - 6.15.*

Linux/Linux 6.16

Linux/Linux c4a16820d90199409c9bf01c4f794e1e9e8d8fd8 - 0748e553df0225754c316a92af3a77fdc057b358

Linux/Linux c4a16820d90199409c9bf01c4f794e1e9e8d8fd8 - 142db4e76110dd80239f4e79810f85ea1735ad60

linux/linux_kernel 6.16 rc1 (3 CPE variants)

linux/linux_kernel 6.15 - 6.15.5

Published Jul 09, 2025

Tracked Since Feb 18, 2026