CVE-2026-98993

The Linux kernel contains a vulnerability where clone_mnt() improperly copies the MNT_UMOUNT flag because it only masks MNT_INTERNAL_FLAGS . When a mount is lazily unmounted but kept alive by a file descriptor, it can be copied into a new namespace while retaining the MNT_UMOUNT flag. This leads ...

EUVD-2026-108787

In the Linux kernel, the following vulnerability has been resolved: namespace: don't inherit MNTUMOUNT in clonemnt MNTUMOUNT gets raised on a mount that umounttree or umountone has taken out of its namespace. It's never cleared. detachmounts unhooks a mount that carries it instead of unmounting i...