CVE-2026-98981

A flaw was found in the Linux kernel. A local user can cause an information disclosure by exploiting a race condition during file or directory removal operations. When a file or directory serving as a mount point across namespaces is unlinked or renamed, the kernel detaches the filesystem mounts before clearing the cached directory entry. A concurrent lookup can access the temporarily uncovered underlying file or directory that was intended to remain hidden, exposing sensitive data.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.