TI-2025-25837 CVE-2025-38499 · GHSA-cc85-5h45-qhc8
clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns What we want is to verify there is that clone won't expose something hi…