CVE-2026-72034

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the capable wrt mount() function where the system incorrectly assumes that the mount namespace remains valid after an initial check. A detached mount created via open tree(..., OPEN TREE CLONE) can be dissolved during fput while open by handle at() is executing, or umount tree() can clear the mount->mnt ns variable. If the helper function observes a NULL value for mount->mnt ns, it attempts to dereference mnt ns->user ns, leading to a system panic. RCU (Read-Copy-Update) is a synchronization mechanism that allows multiple readers to access data while it is being updated.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.