Threats tagged 'ghsa-3w4f-86g3-p6vp'

CVE-2025-38247 is a vulnerability in the Linux kernel involving a leak of user namespace (userns) and possibly mount ID map (mnt_idmap) in the open_tree_attr(2) system call. The issue arises because after want_mount_setattr() returns positively, finish_mount_kattr() must release the mnt_userns reference, but failing do_mount_setattr() does not adjust this, leading to a resource leak. This flaw has been resolved in the Linux kernel.