CVE-2026-78409

The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to opentree with ATSYMLINKNOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with...

PT-2026-72862

Name of the Vulnerable Software and Affected Versions Linux kernel version 5.10.246-syzkaller Description A NULL pointer dereference occurs in the afs get tree function. This happens because afs alloc sbi utilizes kzalloc for memory allocation; when ctx-dyn root is not null, the as-cell and...

CVE-2025-40195 mount: handle NULL values in mnt_ns_release()

In the Linux kernel, the following vulnerability has been resolved: mount: handle NULL values in mntnsrelease When calling in listmount mntnsrelease may be passed a NULL pointer. Handle that case gracefully...