Riskcovery

CVE-2025-38028

NFS/localio: Fix a race in nfs_local_open_fh()

State
Published
Severity
7.8 High
Published
Jun 18, 2025
Updated
Aug 5, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

NFS/localio: Fix a race in nfs_local_open_fh()

Once the clp->cl_uuid.lock has been dropped, another CPU could come in and free the struct nfsd_file that was just added. To prevent that from happening, take the RCU read lock before dropping the spin lock.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 86e00412254a717ffd5d38dc5ec0ee1cce6281b3 to before 185a2f2ddabdcf999823f61de67f86376883920dAffected
  • 86e00412254a717ffd5d38dc5ec0ee1cce6281b3 to before fa7ab64f1e2fdc8f2603aab8e0dd20de89cb10d9Affected
LinuxLinux
  • 6.14Affected
  • before 6.14Not affected
  • 6.14.8 through 6.14.*Not affected
  • 6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.