CVE-2025-38498 – Linux Kernel Mount Namespace Permission Bypass Vulnerability

CVE ID : CVE-2025-38498

Published : July 30, 2025, 6:15 a.m. | 1 hour, 14 minutes ago

Description : In the Linux kernel, the following vulnerability has been resolved:

do_change_type(): refuse to operate on unmounted/not ours mounts

Ensure that propagation settings can only be changed for mounts located
in the caller’s mount namespace. This change aligns permission checking
with the rest of mount(2).

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…