CVE-2025-40203

Published: November 14, 2025Last modified: November 14, 2025

Description

In the Linux kernel, the following vulnerability has been resolved: listmount: don't call path_put() under namespace semaphore Massage listmount() and make sure we don't call path_put() under the namespace semaphore. If we put the last reference we're fscked.

Status

ProductReleasePackageStatus
Alpaquita Linux23 LTSlinux-ltsNot affected (6.1.33-r0)
25 LTSlinux-ltsFixed (6.12.57-r0)
Streamlinux-ltsFixed (6.12.55-r0)

References

ON THIS PAGE