diff --git a/src/security/bpf_process_event.h b/src/security/bpf_process_event.h
index 06b0567cd455bb5618b6cf6e3e34ef98799e39b3..1296c9478d1a55874c3b6dc7a6a8528401c08c6d 100644
--- a/src/security/bpf_process_event.h
+++ b/src/security/bpf_process_event.h
@@ -207,8 +207,7 @@ FUNC_INLINE long cwd_read(struct cwd_read_data *data)
       bpf_probe_read(&data->dentry, sizeof(data->dentry),
                  _(&mnt->mnt_mountpoint));
       data->mnt = parent;
-      bpf_probe_read(&data->vfsmnt, sizeof(data->vfsmnt),
-                 _(&mnt->mnt));
+      data->vfsmnt = _(&parent->mnt);
       return 0;
     }
     // resolved all path components successfully