Skip to content
Sign in
7.8 High

CVE-2025-38498 In the Linux kernel, the following vulnerability has been resolved: do_change_type(): refuse to operate on unmounted/not…

Description

In the Linux kernel, the following vulnerability has been resolved: do_change_type(): refuse to operate on unmounted/not ours mounts Ensure that propagation settings can only be changed for mounts located in the caller's mount namespace. This change aligns permission checking with the rest of mount(2).

Affected products and versions

Product Affected versions Fixed in
Linux 6.16 earliest → < 6.16 6.16
Linux 6.15 earliest → < 6.15.3 6.15.3
Linux 6.12 earliest → < 6.12.34 6.12.34
Linux 6.6 earliest → < 6.6.94 6.6.94
Linux 6.1 earliest → < 6.1.142 6.1.142
Linux 5.15 earliest → < 5.15.186 5.15.186
Linux 5.10 earliest → < 5.10.239 5.10.239
Linux 5.4 earliest → < 5.4.295 5.4.295
Linux 2.6.15 No fix stated
Show the 19 other branches
Product Affected versions Fixed in
RUGGEDCOM RST2428P 3.3 earliest → < 3.3 3.3
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family 3.3 earliest → < 3.3 3.3
SCALANCE XCH328 3.3 earliest → < 3.3 3.3
SCALANCE XCM324 3.3 earliest → < 3.3 3.3
SCALANCE XCM328 3.3 earliest → < 3.3 3.3
SCALANCE XCM332 3.3 earliest → < 3.3 3.3
SCALANCE XRH334 (24 V DC, 8xFO, CC) 3.3 earliest → < 3.3 3.3
SCALANCE XRM334 (230 V AC, 12xFO) 3.3 earliest → < 3.3 3.3
SCALANCE XRM334 (230 V AC, 8xFO) 3.3 earliest → < 3.3 3.3
SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) 3.3 earliest → < 3.3 3.3
SCALANCE XRM334 (24 V DC, 12xFO) 3.3 earliest → < 3.3 3.3
SCALANCE XRM334 (24 V DC, 8xFO) 3.3 earliest → < 3.3 3.3
SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) 3.3 earliest → < 3.3 3.3
SCALANCE XRM334 (2x230 V AC, 12xFO) 3.3 earliest → < 3.3 3.3
SCALANCE XRM334 (2x230 V AC, 8xFO) 3.3 earliest → < 3.3 3.3
SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) 3.3 earliest → < 3.3 3.3
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.5 → latest No fix stated
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 3.1.5 → latest No fix stated
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.5 → latest No fix stated

Other CVEs of Linux

The 18300 CVEs of Linux →
CVE-2026-99284 net: skbuff: propagate shared-frag marker in skb_zerocopy() Not rated CVE-2026-99283 netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets Not rated CVE-2026-99282 net/sched: sch_teql: fix use-after-free on lower qdisc drop Not rated CVE-2026-99281 tun: Require CAP_NET_ADMIN to attach to an ownerless device Not rated
Track this CVE