CVE - CVE-2025-38058

CVE-ID
CVE-2025-38058	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock ... or we risk stealing final mntput from sync umount - raising mnt_count after umount(2) has verified that victim is not busy, but before it has set MNT_SYNC_UMOUNT; in that case __legitimize_mnt() doesn't see that it's safe to quietly undo mnt_count increment and leaves dropping the reference to caller, where it'll be a full-blown mntput(). Check under mount_lock is needed; leaving the current one done before taking that makes no sense - it's nowhere near common enough to bother with.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/250cf3693060a5f803c5f1ddc082bb06b16112a9 URL:https://git.kernel.org/stable/c/250cf3693060a5f803c5f1ddc082bb06b16112a9 MISC:https://git.kernel.org/stable/c/628fb00195ce21a90cf9e4e3d105cd9e58f77b40 URL:https://git.kernel.org/stable/c/628fb00195ce21a90cf9e4e3d105cd9e58f77b40 MISC:https://git.kernel.org/stable/c/8cafd7266fa02e0863bacbf872fe635c0b9725eb URL:https://git.kernel.org/stable/c/8cafd7266fa02e0863bacbf872fe635c0b9725eb MISC:https://git.kernel.org/stable/c/9b0915e72b3cf52474dcee0b24a2f99d93e604a3 URL:https://git.kernel.org/stable/c/9b0915e72b3cf52474dcee0b24a2f99d93e604a3 MISC:https://git.kernel.org/stable/c/b55996939c71a3e1a38f3cdc6a8859797efc9083 URL:https://git.kernel.org/stable/c/b55996939c71a3e1a38f3cdc6a8859797efc9083 MISC:https://git.kernel.org/stable/c/b89eb56a378b7b2c1176787fc228d0a57172bdd5 URL:https://git.kernel.org/stable/c/b89eb56a378b7b2c1176787fc228d0a57172bdd5 MISC:https://git.kernel.org/stable/c/d8ece4ced3b051e656c77180df2e69e19e24edc1 URL:https://git.kernel.org/stable/c/d8ece4ced3b051e656c77180df2e69e19e24edc1 MISC:https://git.kernel.org/stable/c/f6d45fd92f62845cbd1eb5128fd8f0ed7d0c5a42 URL:https://git.kernel.org/stable/c/f6d45fd92f62845cbd1eb5128fd8f0ed7d0c5a42
Assigning CNA
kernel.org
Date Record Created
20250416	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250416)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)