Merge pull request #1868 from Abyss-W4tcher/fix_broken_mount_enum_after_6_13

ikelos · web-flow · commit a17281a2145f · 2025-11-24T09:05:18.000Z
Linux: Fix broken mount enumeration on 6.13+
diff --git a/volatility3/framework/symbols/linux/extensions/__init__.py b/volatility3/framework/symbols/linux/extensions/__init__.py
@@ -2005,8 +2005,9 @@ def get_mount_points(
                 self._context, self
             )
             for node in self.mounts.get_nodes():
+                # See kernel's node_to_mount()
                 mnt = linux.LinuxUtilities.container_of(
-                    node, "mount", "mnt_list", vmlinux
+                    node, "mount", "mnt_node", vmlinux
                 )
                 yield mnt
         else:

Original file line number	Diff line number	Diff line change
`@@ -2005,8 +2005,9 @@ def get_mount_points(`
`2005`	`2005`	`self._context, self`
`2006`	`2006`	`)`
`2007`	`2007`	`for node in self.mounts.get_nodes():`
	`2008`	`+ # See kernel's node_to_mount()`
`2008`	`2009`	`mnt = linux.LinuxUtilities.container_of(`
`2009`		`- node, "mount", "mnt_list", vmlinux`
	`2010`	`+ node, "mount", "mnt_node", vmlinux`
`2010`	`2011`	`)`
`2011`	`2012`	`yield mnt`
`2012`	`2013`	`else:`