CVE-2025-62161: Toctou Open Close Bind Mount Same Path
A file path is opened without O_PATH, the file descriptor is immediately closed without being used for mounting, and the same path is later passed as a bind-mount source or destination. This TOCTOU window (CWE-363 / CWE-61) allows an attacker to replace the path with a symlink between close() and mount(), causing an arbitrary file to be bind-mounted and bypa
Rustgreprules fetch cve-2025-62161-toctou-open-close-bind-mount-same-path --engine opengrepDescription
A file path is opened without O_PATH, the file descriptor is immediately closed without being used for mounting, and the same path is later passed as a bind-mount source or destination. This TOCTOU window (CWE-363 / CWE-61) allows an attacker to replace the path with a symlink between close() and mount(), causing an arbitrary file to be bind-mounted and bypa
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.