In the Linux kernel, the following vulnerability has been resolved:
dochangetype(): refuse to operate on unmounted/not ours mounts
Ensure that propagation settings can only be changed for mounts located in the caller's mount namespace. This change aligns permission checking with the rest of mount(2).
[
    {
        "deprecated": false,
        "target": {
            "function": "do_change_type",
            "file": "fs/namespace.c"
        },
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@432a171d60056489270c462e651e6c3a13f855b1",
        "digest": {
            "function_hash": "100633186927892321900666721689094429214",
            "length": 568.0
        },
        "id": "CVE-2025-38498-0594a1e4",
        "signature_type": "Function"
    },
    {
        "deprecated": false,
        "target": {
            "file": "fs/namespace.c"
        },
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@064014f7812744451d5d0592f3d2bcd727f2ee93",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "317374636196836793256570394692500370867",
                "160204981321156357021786264355095240553",
                "164438600289022470674958313919561828157",
                "214024058292758305076239904806821155150"
            ]
        },
        "id": "CVE-2025-38498-1697588a",
        "signature_type": "Line"
    },
    {
        "deprecated": false,
        "target": {
            "file": "fs/namespace.c"
        },
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9c1ddfeb662b668fff69c5f1cfdd9f5d23d55d23",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "317374636196836793256570394692500370867",
                "160204981321156357021786264355095240553",
                "164438600289022470674958313919561828157",
                "214024058292758305076239904806821155150"
            ]
        },
        "id": "CVE-2025-38498-4ee474be",
        "signature_type": "Line"
    },
    {
        "deprecated": false,
        "target": {
            "file": "fs/namespace.c"
        },
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@12f147ddd6de7382dad54812e65f3f08d05809fc",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "317374636196836793256570394692500370867",
                "160204981321156357021786264355095240553",
                "164438600289022470674958313919561828157",
                "214024058292758305076239904806821155150"
            ]
        },
        "id": "CVE-2025-38498-7090b092",
        "signature_type": "Line"
    },
    {
        "deprecated": false,
        "target": {
            "function": "do_change_type",
            "file": "fs/namespace.c"
        },
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@787937c4e373f1722c4343e5a5a4eb0f8543e589",
        "digest": {
            "function_hash": "100633186927892321900666721689094429214",
            "length": 568.0
        },
        "id": "CVE-2025-38498-87111a27",
        "signature_type": "Function"
    },
    {
        "deprecated": false,
        "target": {
            "function": "do_change_type",
            "file": "fs/namespace.c"
        },
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9c1ddfeb662b668fff69c5f1cfdd9f5d23d55d23",
        "digest": {
            "function_hash": "15143769986060380481246162309952105800",
            "length": 545.0
        },
        "id": "CVE-2025-38498-881a6133",
        "signature_type": "Function"
    },
    {
        "deprecated": false,
        "target": {
            "file": "fs/namespace.c"
        },
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@432a171d60056489270c462e651e6c3a13f855b1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "317374636196836793256570394692500370867",
                "160204981321156357021786264355095240553",
                "164438600289022470674958313919561828157",
                "214024058292758305076239904806821155150"
            ]
        },
        "id": "CVE-2025-38498-903356f7",
        "signature_type": "Line"
    },
    {
        "deprecated": false,
        "target": {
            "function": "do_change_type",
            "file": "fs/namespace.c"
        },
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@12f147ddd6de7382dad54812e65f3f08d05809fc",
        "digest": {
            "function_hash": "15143769986060380481246162309952105800",
            "length": 545.0
        },
        "id": "CVE-2025-38498-904c2cfd",
        "signature_type": "Function"
    },
    {
        "deprecated": false,
        "target": {
            "function": "do_change_type",
            "file": "fs/namespace.c"
        },
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@064014f7812744451d5d0592f3d2bcd727f2ee93",
        "digest": {
            "function_hash": "100633186927892321900666721689094429214",
            "length": 568.0
        },
        "id": "CVE-2025-38498-aca68a0b",
        "signature_type": "Function"
    },
    {
        "deprecated": false,
        "target": {
            "file": "fs/namespace.c"
        },
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4f091ad0862b02dc42a19a120b7048de848561f8",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "317374636196836793256570394692500370867",
                "160204981321156357021786264355095240553",
                "164438600289022470674958313919561828157",
                "214024058292758305076239904806821155150"
            ]
        },
        "id": "CVE-2025-38498-e57d795e",
        "signature_type": "Line"
    },
    {
        "deprecated": false,
        "target": {
            "file": "fs/namespace.c"
        },
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@787937c4e373f1722c4343e5a5a4eb0f8543e589",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "317374636196836793256570394692500370867",
                "160204981321156357021786264355095240553",
                "164438600289022470674958313919561828157",
                "214024058292758305076239904806821155150"
            ]
        },
        "id": "CVE-2025-38498-f2308fb4",
        "signature_type": "Line"
    },
    {
        "deprecated": false,
        "target": {
            "function": "do_change_type",
            "file": "fs/namespace.c"
        },
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4f091ad0862b02dc42a19a120b7048de848561f8",
        "digest": {
            "function_hash": "15143769986060380481246162309952105800",
            "length": 545.0
        },
        "id": "CVE-2025-38498-fb5a08c0",
        "signature_type": "Function"
    }
]