SECURITY ANNOUNCEMENT

CVE-2026-98988

23 October 2026

that has anything mounted below the requested directory and copy unbindable mounts in a recursive copy. A caller that is privileged over the source mount namespace sees no change.

Introduced

7.09b8a0ba68246a61d903ce62c35c303b1501df28b

Fixed releases

7.2.11b8a94a405ddcf45e9470789e0a821d8f2aa4ca10

7.30febe278ec45b1ccdbe9bd5ff1ba365d8fd55e2a

View source announcement ↗