A vulnerability labeled as critical has been found in Linux Kernel up to 6.17.2. This affects the function mnt_ns_from_dentry of the file fanotify_nullptr.c of the component fanotify. The manipulation results in null pointer dereference.

This vulnerability was named CVE-2025-40072. The attack needs to be approached within the local network. There is no available exploit.

The affected component should be upgraded.