CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts

Medium severity · published Jul 30, 2025

CVE-2025-38498

do_change_type(): refuse to operate on unmounted/not ours mounts

5.5

CVSS

0.2%

EPSS

On KEV

Description

In the Linux kernel, the following vulnerability has been resolved: do_change_type(): refuse to operate on unmounted/not ours mounts Ensure that propagation settings can only be changed for mounts located in the caller's mount namespace. This change aligns permission checking with the rest of mount(2).

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack vector

Local

Complexity

Low

Privileges

Low

User interaction

None

Confidentiality

None

Integrity

None

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.2% · higher than 9% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Kernel · Linux

2.6.15 before 5.4.295; 5.5 before 5.10.239; 5.11 before 5.15.186; 5.16 before 6.1.142; 6.2 before 6.6.94; 6.7 before 6.12.34; +1 more · source: NVD

Linux · Linux

07b20889e3052c7e77d6a6a54e7e83446eb1ba84 before 787937c4e373f1722c4343e5a5a4eb0f8543e589; 07b20889e3052c7e77d6a6a54e7e83446eb1ba84 before c7d11fdf8e5db5f34a6c062c7e6ba3a0971879d2; 07b20889e3052c7e77d6a6a54e7e83446eb1ba84 before 432a171d60056489270c462e651e6c3a13f855b1; 07b20889e3052c7e77d6a6a54e7e83446eb1ba84 before 064014f7812744451d5d0592f3d2bcd727f2ee93; 07b20889e3052c7e77d6a6a54e7e83446eb1ba84 before 4f091ad0862b02dc42a19a120b7048de848561f8; 07b20889e3052c7e77d6a6a54e7e83446eb1ba84 before 9c1ddfeb662b668fff69c5f1cfdd9f5d23d55d23; +3 more · source: vendor

Debian Linux · Debian

11.0 · source: NVD

RUGGEDCOM RST2428P · Siemens

before V3.3 · source: CISA

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · Siemens

before V3.3 · source: CISA

SCALANCE XCH328 · Siemens

before V3.3 · source: CISA

SCALANCE XCM324 · Siemens

before V3.3 · source: CISA

SCALANCE XCM328 · Siemens

before V3.3 · source: CISA

SCALANCE XCM332 · Siemens

before V3.3 · source: CISA

SCALANCE XRH334 (24 V DC, 8xFO, CC) · Siemens

before V3.3 · source: CISA

SCALANCE XRM334 (230 V AC, 12xFO) · Siemens

before V3.3 · source: CISA

SCALANCE XRM334 (230 V AC, 8xFO) · Siemens

before V3.3 · source: CISA

In the news

VulnerabilityHigh

Siemens SINEC OS

View CSAF Summary SINEC OS before V3.3 contains third-party components with multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions. The following versions of Siemens SINEC OS are affected: RUGGEDCOM RST2428P (6GK6242-6PA00) vers:intdot/<3.3 (CVE-2022-48174, CVE-2023-7256, CVE-2023-39810, CVE-2023-42363, CVE-2023-42364, CVE-2023-42365, CVE-2023-42366, CVE-2024-6197, CVE-2024-6874, CVE-2024-7264, CVE-2024-8006, CVE-2024-8096, CVE-2024-9681, CVE-2024-11053, CVE-2024-12718, CVE-2024-41996, CVE-2024-47619, CVE-2024-52533, CVE-2025-0167, CVE-2025-0665, CVE-2025-0725, CVE-2025-1390, CVE-2025-3360, CVE-2025-4138, CVE-2025-4330, CVE-2025-4373, CVE-2025-4435, CVE-2025-4516, CVE-2025-4517, CVE-2025-6141, CVE-2025-9086, CVE-2025-9230, CVE-2025-9231, CVE-2025-9232, CVE-2025-10148, CVE-2025-27587, CVE-2025-32433, CVE-2025-38084, CVE-2025-38085, CVE-2025-38086, CVE-2025-38345, CVE-2025-38350, CVE-2025-38498, CVE-2025-39839, CVE-2025-39841, CVE-2025-39846, CVE-2025-39853, CVE-2025-39860, CVE-2025-39864, CVE-2025-39865, CVE-2025-59375) SCALANCE XCH328 (6GK5328-4TS01-2EC2) vers:intdot/<3.3 (CVE-2022-48174, CVE-2023-7256, CVE-2023-39810, CVE-2023-42363, CVE-2023-42364, CVE-2023-42365, CVE-2023-42366, CVE-2024-6197, CVE-2024-6874, CVE-2024-7264, CVE-2024-8006, CVE-2024-8096, CVE-2024-9681, CVE-2024-11053, CVE-2024-12718, CVE-2024-41996, CVE-2024-47619, CVE-2024-52533, CVE-2025-0167, CVE-2025-0665...

CVE-2022-48174 CVE-2023-7256 CVE-2023-39810

Feb 12, 2026·CISA Advisories

Affected product

Kernel

Linux

All Kernel CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2025-38498

CVE.org

https://www.cve.org/CVERecord?id=CVE-2025-38498

Patch