CVE-2026-98988

In the Linux kernel, the following vulnerability has been resolved: namespace: keep covered mounts covered in OPENTREENAMESPACE opentreeOPENTREENAMESPACE creates a new mount namespace from a copy of the tree at the given path. The caller needs to be privileged over its current user namespace...

CVE-2026-98988

The Linux kernel contains a vulnerability in the open_tree(OPEN_TREE_NAMESPACE) function where covered mounts are incorrectly exposed in a new mount namespace. When an unprivileged user creates a new user namespace and calls open_tree, the resulting namespace fails to hide content that was previo...