CVE-2026-98995

A flaw was found in the Linux kernel. A local user can cause a denial of service (DoS) or potentially escalate privileges by triggering a use-after-free condition in the mount namespace subsystem. When moving file system mount points, the kernel fails to clear a reference pointer on the former parent mount. An attacker can exploit this dangling pointer by unmounting file systems while maintaining open file descriptors, causing the kernel to access freed memory and crash the system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.