fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()

...

CVE-2025-37988

In the Linux kernel, the following vulnerability has been resolved: fix a couple of races in MNTTREEBENEATH handling by domovemount Normally dolockmountpath, is locking a mountpoint pinned by path and at the time when matching unlockmount unlocks that location it is still pinned by the same thing...

CVE-2025-37988 fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()

In the Linux kernel, the following vulnerability has been resolved: fix a couple of races in MNTTREEBENEATH handling by domovemount Normally dolockmountpath, is locking a mountpoint pinned by path and at the time when matching unlockmount unlocks that location it is still pinned by the same thing...

CVE-2025-37988

CVE-2025-37988 concerns the Linux kernel and involves a race condition in MNT_TREE_BENEATH handling within do_move_mount(). The vulnerability arises because the object locked during mount changes is the mountpoint of path->mnt, not the path itself, allowing mnt_parent to change under weak lock...