12 matches found
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 5.19. It arises when a failure in setting up mqueue or ipc sysctl leads to the use of the regular mntput function to unmount a long-lived mount, resulting in leaks of the mount and mqueue superblocks...
PT-2026-128165
In the Linux kernel, the following vulnerability has been resolved: ipc: drop the mqueue mount with kern unmount on setup failure mq init ns creates the mqueue mount with fc mount longterm, so its -mnt ns is MNT NS INTERNAL. When setting up the mqueue or ipc sysctls or msg init ns fails afterward...
Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: legitimizemnt: the check for MNTSYNCUMOUNT should be performed under mountlock ... otherwise we risk stealing the final mntput from sync umount — raising mntcount after umount2 has verified that the victim is not busy, but before...
Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011350)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011350 advisory. In the Linux kernel, the following vulnerability has been resolved: legitimizemnt: check for MNTSYNCUMOUNT should be under mountlock ... or we risk stealing final...
SUSE CVE-2025-38058
In the Linux kernel, the following vulnerability has been resolved: legitimizemnt: check for MNTSYNCUMOUNT should be under mountlock ... or we risk stealing final mntput from sync umount - raising mntcount after umount2 has verified that victim is not busy, but before it has set MNTSYNCUMOUNT; in...
AZL-64013 CVE-2025-38058 affecting package kernel for versions less than 6.6.96.1-1
In the Linux kernel, the following vulnerability has been resolved: legitimizemnt: check for MNTSYNCUMOUNT should be under mountlock ... or we risk stealing final mntput from sync umount - raising mntcount after umount2 has verified that victim is not busy, but before it has set MNTSYNCUMOUNT; in...
CVE-2025-38058 __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
In the Linux kernel, the following vulnerability has been resolved: legitimizemnt: check for MNTSYNCUMOUNT should be under mountlock ... or we risk stealing final mntput from sync umount - raising mntcount after umount2 has verified that victim is not busy, but before it has set MNTSYNCUMOUNT; in...
CVE-2025-38058: Improper Locking
In the Linux kernel, the following vulnerability has been resolved: legitimizemnt: check for MNTSYNCUMOUNT should be under mountlock ... or we risk stealing final mntput from sync umount - raising mntcount after umount2 has verified that victim is not busy, but before it has set MNTSYNCUMOUNT; in...
SUSE CVE-2005-3356
The mqopen system call in Linux kernel 2.6.9, in certain situations, can decrement a counter twice "double decrement" as a result of multiple calls to the mntput function when the dentryopen function call fails, which allows local users to cause a denial of service panic via unspecified attack...
Linux Kernel mq_open系统调用拒绝服务漏洞
BUGTRAQ ID: 16283 CVECAN ID: CVE-2005-335 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel对目录操作的实现上存在漏洞，本地攻击者可能利用此漏洞对系统进行拒绝服务攻击。 如果dentryopen函数调用失败的话，就会多次调用mntput函数。Linux Kernel的mqopen系统调用在这种情况下就可能两次递减计数器，这就允许本地攻击者导致系统忙碌，造成拒绝服务。 Linux kernel 2.6.9 RedHat Linux WS 4 RedHat Linux ES 4 RedHat Linux...
CVE-2005-3356: Undefined Security Weakness
The mqopen system call in Linux kernel 2.6.9, in certain situations, can decrement a counter twice "double decrement" as a result of multiple calls to the mntput function when the dentryopen function call fails, which allows local users to cause a denial of service panic via unspecified attack...
security flaw
The mqopen system call in Linux kernel 2.6.9, in certain situations, can decrement a counter twice "double decrement" as a result of multiple calls to the mntput function when the dentryopen function call fails, which allows local users to cause a denial of service panic via unspecified attack...