CVE-2026-98987

The Linux kernel contains a vulnerability where the attach_recursive_mnt() function fails to inspect the topmost mount of a source chain for a mount namespace file. This oversight causes mnt_change_mountpoint() to incorrectly attach existing mounts below the root of the mount namespace file as a ...

EUVD-2026-108781

In the Linux kernel, the following vulnerability has been resolved: namespace: look at the topmost mount for a mount namespace file attachrecursivemnt preallocates a mountpoint for the root of the topmost mount of the source so that a mount that already sits at the destination can be put on top o...

CVE-2026-98979

The Linux kernel contains a vulnerability where automounts can be added even when the parent mount is not in the caller's mount namespace. The issue stems from clone_private_mount() using MNT_NS_INTERNAL, which allows attach_recursive_mnt() to accept a mount point that count_mounts() subsequently...