CVE-2025-68300: fs/namespace: fix reference leak in grab_requested_mnt_ns
Published Dec 16, 2025
·Updated
In the Linux kernel, the following vulnerability has been resolved:
fs/namespace: fix reference leak in grabrequestedmntns
lookupmntns() already takes a reference on mntns. grabrequestedmntns() doesn't need to take an extra reference.
Affected Software
1 affected component
Linux Linux kernel
Event History
Dec 16, 2025
CVE Published
via MITRE·03:06 PM
Data Sourced
via MITRE·03:06 PM
Description
Data Sourced
via NVD·04:16 PM
Description
Frequently Asked Questions
1
What is the practical impact of this issue?
The issue is a reference leak involving mount namespaces in the Linux kernel. The provided information does not describe a privilege boundary bypass, crash, or code-execution impact.
2
Is there a temporary mitigation if a kernel update cannot be applied immediately?
No mitigation or configuration workaround is provided. The available information only identifies the code fix: avoid taking an additional mount-namespace reference after lookup_mnt_ns() has already acquired one.