CVE-2026-98978

The Linux kernel contains a vulnerability where a locked mount could be prematurely expired. A shrinkable mount could become locked if a user namespace owner moved it beneath a locked mount using MOVE_MOUNT_BENEATH , causing the locked property to move to the bottom mount. This allowed the top mo...

EUVD-2026-108772

In the Linux kernel, the following vulnerability has been resolved: namespace: never expire a locked mount Locked mounts are special. They protect the underlying files and directories from being revealed. doumount refuses to unmount locked mounts but shrinksubmounts doesn't. A shrinkable mount ca...

UBUNTU-CVE-2014-9717

fs/namespace.c in the Linux kernel before 4.0.2 processes MNTDETACH umount2 system calls without verifying that the MNTLOCKED flag is unset, which allows local users to bypass intended access restrictions and navigate to filesystem locations beneath a mount by calling umount2 within a user...