CVE-2025-21795

NFSD: fix hang in nfsd4_shutdown_callback

State: Published
Severity: 7.5 High
Published: Feb 27, 2025
Updated: Oct 15, 2026
Reserved: Dec 29, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

NFSD: fix hang in nfsd4_shutdown_callback

If nfs4_client is in courtesy state then there is no point to send the callback. This causes nfsd4_shutdown_callback to hang since cl_cb_inflight is not 0. This hang lasts about 15 minutes until TCP notifies NFSD that the connection was dropped.

This patch modifies nfsd4_run_cb_work to skip the RPC call if nfs4_client is in courtesy state.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	67ef9e5fd737eab2495f2586df7e9ea30caa1b77 to before abed68027ea3ab893ac85cc46a00e2e64a324239Affected 26540b8940a2e21582afa61a6fb8af87310bac72 to before efa8a261c575f816c7e79a87aeb3ef8a0bd6b221Affected 66af25799940b26efd41ea6e648f75c41a48a2c2 to before 38d345f612503b850c2973e5a879f88e441b34d7Affected 66af25799940b26efd41ea6e648f75c41a48a2c2 to before 23ad7797c74cd8f7f90617f1e59a8703e2b43908Affected 66af25799940b26efd41ea6e648f75c41a48a2c2 to before cedfbb92cf97a6bff3d25633001d9c44442ee854Affected 66af25799940b26efd41ea6e648f75c41a48a2c2 to before e88d2451cd42e025465d6b51fd716a47b0b3800dAffected 66af25799940b26efd41ea6e648f75c41a48a2c2 to before 036ac2778f7b28885814c6fbc07e156ad1624d03Affected 5.10.220 to before 5.10.235Affected 5.15.154 to before 5.15.179Affected
LinuxLinux	5.19Affected before 5.19Not affected 5.10.235 through 5.10.Not affected 5.15.179 through 5.15.Not affected 6.1.129 through 6.1.Not affected 6.6.79 through 6.6.Not affected 6.12.16 through 6.12.Not affected 6.13.4 through 6.13.Not affected 6.14 and laterNot affected

Product

Versions

LinuxLinux

67ef9e5fd737eab2495f2586df7e9ea30caa1b77 to before abed68027ea3ab893ac85cc46a00e2e64a324239Affected
26540b8940a2e21582afa61a6fb8af87310bac72 to before efa8a261c575f816c7e79a87aeb3ef8a0bd6b221Affected
66af25799940b26efd41ea6e648f75c41a48a2c2 to before 38d345f612503b850c2973e5a879f88e441b34d7Affected
66af25799940b26efd41ea6e648f75c41a48a2c2 to before 23ad7797c74cd8f7f90617f1e59a8703e2b43908Affected
66af25799940b26efd41ea6e648f75c41a48a2c2 to before cedfbb92cf97a6bff3d25633001d9c44442ee854Affected
66af25799940b26efd41ea6e648f75c41a48a2c2 to before e88d2451cd42e025465d6b51fd716a47b0b3800dAffected
66af25799940b26efd41ea6e648f75c41a48a2c2 to before 036ac2778f7b28885814c6fbc07e156ad1624d03Affected
5.10.220 to before 5.10.235Affected
5.15.154 to before 5.15.179Affected

LinuxLinux

5.19Affected
before 5.19Not affected
5.10.235 through 5.10.*Not affected
5.15.179 through 5.15.*Not affected
6.1.129 through 6.1.*Not affected
6.6.79 through 6.6.*Not affected
6.12.16 through 6.12.*Not affected
6.13.4 through 6.13.*Not affected
6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.