VDB
DEBIAN-CVE-2025-38498
DEBIAN-CVE-2025-38498
PUBLISHED
CVSS 5.5 MEDIUM
In the Linux kernel, the following vulnerability has been resolved: do_change_type(): refuse to operate on unmounted/not ours mounts Ensure that propagation settings can only be changed for mounts located in the caller's mount namespace. This change aligns permission checking with the rest of mount(2).
Risk Scores
CVSS v3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | linux | 0, 0 |
| Debian:11 | linux-6.1 | 6.1.112-1, 6.1.119-1, 6.1.128-1 |
| Debian:14 | linux | 0, 0 |
| Debian:12 | linux | 6.1.139-1, 6.1.140-1, 6.1.27-1 |
| Debian:11 | linux | 5.10.179-4, 0, 5.10.103-1 |
Timeline
- Jul 30, 2025 CVE Published
- Apr 28, 2026 CVE Updated