CVE-2026-98992

A flaw was found in the Linux kernel. When performing a recursive bind mount on a lazily unmounted namespace or process file held open by a file descriptor, the kernel fails to verify that the mount tree is still active. A local user could exploit this vulnerability to duplicate and access unmounted filesystem trees, potentially bypassing intended mount boundaries or causing system instability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.