CVE-2025-40072 — Linux vulnerability
15 documents6 sources
Severity
—N/A
No vectorEPSS
0.0%
top 92.81%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 28
Latest updateFeb 24
Description
In the Linux kernel, the following vulnerability has been resolved:
fanotify: Validate the return value of mnt_ns_from_dentry() before dereferencing
The function do_fanotify_mark() does not validate if
mnt_ns_from_dentry() returns NULL before dereferencing mntns->user_ns.
This causes a NULL pointer dereference in do_fanotify_mark() if the
path is not a mount namespace object.
Fix this by checking mnt_ns_from_dentry()'s return value before
dereferencing it.
Before the patch
$ gcc fanotify_nu…
Affected Packages5 packages
▶CVEListV5linux/linux58f5fbeb367ff6f30a2448b2cad70f70b2de4b06 — 73ce2a774ad6497cbd48dc4f8a5d699bc417f3fa+2
🔴Vulnerability Details
8📋Vendor Advisories
6Red Hat
▶