Merge pull request #1590 from volatilityfoundation/mnt_parent_missing

Add mnt_parent check to kernel version validation

Author: ikelos

volatility3/framework/symbols/linux/extensions/__init__.py

@@ -1574,7 +1574,9 @@ def _is_kernel_prior_to_struct_mount(self) -> bool:
             'True' if the kernel lacks the 'mount' struct, typically indicating kernel < 3.3.
         """
 
-        return not self._context.symbol_space.has_type("mount")
+        return (not self._context.symbol_space.has_type("mount")) and self.has_member(
+            "mnt_parent"
+        )
 
     def is_equal(self, vfsmount_ptr) -> bool:
         """Helper to make sure it is comparing two pointers to 'vfsmount'.