{"id":"CVE-2025-38498","revision":"8309b261ef084f819e444eb1838d8622","records":[{"revision":"8309b261ef084f819e444eb1838d8622","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-38498","aliases":[],"title":"do_change_type(): refuse to operate on unmounted/not ours mounts","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndo_change_type(): refuse to operate on unmounted/not ours mounts\n\nEnsure that propagation settings can only be changed for mounts located\nin the caller's mount namespace. This change aligns permission checking\nwith the rest of mount(2).","state":0,"publishedAt":"2025-07-30T06:03:36.483+00:00","modifiedAt":"2026-10-15T01:07:27.398+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/namespace.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"07b20889e3052c7e77d6a6a54e7e83446eb1ba84\",\n                            \"lessThan\": \"787937c4e373f1722c4343e5a5a4eb0f8543e589\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"07b20889e3052c7e77d6a6a54e7e83446eb1ba84\",\n                            \"lessThan\": \"c7d11fdf8e5db5f34a6c062c7e6ba3a0971879d2\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"07b20889e3052c7e77d6a6a54e7e83446eb1ba84\",\n                            \"lessThan\": \"432a171d60056489270c462e651e6c3a13f855b1\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"07b20889e3052c7e77d6a6a54e7e83446eb1ba84\",\n                            \"lessThan\": \"064014f7812744451d5d0592f3d2bcd727f2ee93\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"07b20889e3052c7e77d6a6a54e7e83446eb1ba84\",\n                            \"lessThan\": \"4f091ad0862b02dc42a19a120b7048de848561f8\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"07b20889e3052c7e77d6a6a54e7e83446eb1ba84\",\n                            \"lessThan\": \"9c1ddfeb662b668fff69c5f1cfdd9f5d23d55d23\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"07b20889e3052c7e77d6a6a54e7e83446eb1ba84\",\n                            \"lessThan\": \"19554c79a2095ddde850906a067915c1ef3a4114\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"07b20889e3052c7e77d6a6a54e7e83446eb1ba84\",\n                            \"lessThan\": \"12f147ddd6de7382dad54812e65f3f08d05809fc\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/namespace.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"2.6.15\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"2.6.15\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.4.295\",\n                            \"lessThanOrEqual\": \"5.4.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.239\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.186\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.142\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.94\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.34\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.15.3\",\n                            \"lessThanOrEqual\": \"6.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.16\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/787937c4e373f1722c4343e5a5a4eb0f8543e589","https://git.kernel.org/stable/c/c7d11fdf8e5db5f34a6c062c7e6ba3a0971879d2","https://git.kernel.org/stable/c/432a171d60056489270c462e651e6c3a13f855b1","https://git.kernel.org/stable/c/064014f7812744451d5d0592f3d2bcd727f2ee93","https://git.kernel.org/stable/c/4f091ad0862b02dc42a19a120b7048de848561f8","https://git.kernel.org/stable/c/9c1ddfeb662b668fff69c5f1cfdd9f5d23d55d23","https://git.kernel.org/stable/c/19554c79a2095ddde850906a067915c1ef3a4114","https://git.kernel.org/stable/c/12f147ddd6de7382dad54812e65f3f08d05809fc"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-38498","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-38498","identifiers":["CVE-2025-38498"]},"retained":false,"historicalAffected":[]}],"coverage":[]}