EUVD-2025-18595

Malicious code in bioql PyPI...

CVE-2025-38058

CVE-2025-38058 affects the Linux kernel. The vulnerability exists in __legitimize_mnt(), where a check for MNT_SYNC_UMOUNT must be performed under mount_lock; otherwise, after umount(2) verifies the victim is not busy but before MNT_SYNC_UMOUNT is set, __legitimize_mnt() may not detect safety to ...

CVE-2025-38058 __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock

In the Linux kernel, the following vulnerability has been resolved: legitimizemnt: check for MNTSYNCUMOUNT should be under mountlock ... or we risk stealing final mntput from sync umount - raising mntcount after umount2 has verified that victim is not busy, but before it has set MNTSYNCUMOUNT; in...