CVE-2026-98996

The Linux kernel contains a vulnerability in the propagate_mount_busy() helper function, which fails to correctly identify busy mounts during synchronous unmounting. Due to a logic mismatch with the propagate_umount() function, the kernel may skip reference checks on mount copies that have two or...

EUVD-2026-108790

In the Linux kernel, the following vulnerability has been resolved: fs: don't silently unmount busy mounts The propagatemountbusy helper exists to decide whether a synchronous can suceed. It does that by looking at the copies of the victims in the mounts its parent propagates to. One of those...

CVE-2026-98991

The Linux kernel is affected by a vulnerability where the mnt_notify_add() function fails to check if a mount is already present on the notify_list. Due to specific interactions between propagate_umount(), shrink_submounts(), and mark_mounts_for_expiry() under a single namespace_sem hold, a mount...

EUVD-2026-108785

In the Linux kernel, the following vulnerability has been resolved: namespace: queue a mount only once for mount notifications mntnotifyadd puts a mount on notifylist. It doesn't check whether the mount is on the list already. That's fine as long as every mount is queued at most once per...