Reference Leak in Linux Kernel Affecting Namespace Handling

CVE-2025-68300

What is CVE-2025-68300?

A vulnerability in the Linux kernel was identified within the namespace handling mechanism. Specifically, the issue arose due to an unnecessary reference being taken by grab_requested_mnt_ns() when a reference was already secured by lookup_mnt_ns(). This redundancy could lead to a reference leak, impairing system stability and performance. The flaw has been addressed to ensure efficient memory management as it relates to namespace operations.

References