CVE-2025-38247 Details
Description
In the Linux kernel, the following vulnerability has been resolved: userns and mnt_idmap leak in open_tree_attr(2) Once want_mount_setattr() has returned a positive, it does require finish_mount_kattr() to release ->mnt_userns. Failing do_mount_setattr() does not change that. As the result, we can end up leaking userns and possibly mnt_idmap as well.
A vulnerability in the Linux kernel has been addressed, involving a leak of user namespace and potentially mount ID map information in the open_tree_attr system call. This issue arises because, after the want_mount_setattr function indicates a positive response, the finish_mount_kattr function is required to release the mount user namespace. However, failing to execute do_mount_setattr does not alter this requirement, leading to an unintentional leak of user namespace and possibly mount ID map data.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0748e553df0225754c316a92af3a77fdc057b358 | kernel.org | Patch |
| https://git.kernel.org/stable/c/142db4e76110dd80239f4e79810f85ea1735ad60 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.15, < 6.15.5 6.16 rc1 6.16 rc2 6.16 rc3 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Nov 19, 2025 | Initial Analysis | [email protected] |
| Jul 9, 2025 | New CVE Received | kernel.org |