What’s Vulnerable › Vulnerabilities

CVE-2025-40195: mount: handle NULL values in mnt_ns_release()

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-11-12 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: mount: handle NULL values in mnt_ns_release() When calling in listmount() mnt_ns_release() may be passed a NULL pointer. Handle that case gracefully.

Affected products

• Linux kernel: 6.11 — fixed in 6.18

How to fix

Upgrade to a fixed version: Linux kernel 6.18. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/2d68f8a7379d9c61005e982600c61948d4d019bd
• https://git.kernel.org/stable/c/6c7ca6a02f8f9549a438a08a23c6327580ecf3d6
• https://git.kernel.org/stable/c/99ae3e70a293834d0274c46a37120c71a24a4995

Get alerted when CVE-2025-40195 or the next vulnerability affects your stack