CVE-2025-38430

nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request

State: Published
Severity: 9.8 Critical
Published: Jul 25, 2025
Updated: Oct 15, 2026
Reserved: Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request

If the request being processed is not a v4 compound request, then examining the cstate can have undefined results.

This patch adds a check that the rpc procedure being executed (rq_procinfo) is the NFSPROC4_COMPOUND procedure.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ed94164398c935a42be7b129a478eb19c598b68a to before bf78a2706ce975981eb5167f2d3b609eb5d24c19Affected ed94164398c935a42be7b129a478eb19c598b68a to before b1d0323a09a29f81572c7391e0d80d78724729c9Affected ed94164398c935a42be7b129a478eb19c598b68a to before 425efc6b3292a3c79bfee4a1661cf043dcd9cf2fAffected ed94164398c935a42be7b129a478eb19c598b68a to before 64a723b0281ecaa59d31aad73ef8e408a84cb603Affected ed94164398c935a42be7b129a478eb19c598b68a to before e7e943ddd1c6731812357a28e7954ade3a7d8517Affected ed94164398c935a42be7b129a478eb19c598b68a to before 7a75a956692aa64211a9e95781af1ec461642de4Affected ed94164398c935a42be7b129a478eb19c598b68a to before 2c54bd5a380ebf646fb9efbc4ae782ff3a83a5afAffected ed94164398c935a42be7b129a478eb19c598b68a to before 1244f0b2c3cecd3f349a877006e67c9492b41807Affected
LinuxLinux	4.8Affected before 4.8Not affected 5.4.295 through 5.4.Not affected 5.10.239 through 5.10.Not affected 5.15.186 through 5.15.Not affected 6.1.142 through 6.1.Not affected 6.6.95 through 6.6.Not affected 6.12.35 through 6.12.Not affected 6.15.4 through 6.15.*Not affected 6.16 and laterNot affected

Product

Versions

LinuxLinux

ed94164398c935a42be7b129a478eb19c598b68a to before bf78a2706ce975981eb5167f2d3b609eb5d24c19Affected
ed94164398c935a42be7b129a478eb19c598b68a to before b1d0323a09a29f81572c7391e0d80d78724729c9Affected
ed94164398c935a42be7b129a478eb19c598b68a to before 425efc6b3292a3c79bfee4a1661cf043dcd9cf2fAffected
ed94164398c935a42be7b129a478eb19c598b68a to before 64a723b0281ecaa59d31aad73ef8e408a84cb603Affected
ed94164398c935a42be7b129a478eb19c598b68a to before e7e943ddd1c6731812357a28e7954ade3a7d8517Affected
ed94164398c935a42be7b129a478eb19c598b68a to before 7a75a956692aa64211a9e95781af1ec461642de4Affected
ed94164398c935a42be7b129a478eb19c598b68a to before 2c54bd5a380ebf646fb9efbc4ae782ff3a83a5afAffected
ed94164398c935a42be7b129a478eb19c598b68a to before 1244f0b2c3cecd3f349a877006e67c9492b41807Affected

LinuxLinux

4.8Affected
before 4.8Not affected
5.4.295 through 5.4.*Not affected
5.10.239 through 5.10.*Not affected
5.15.186 through 5.15.*Not affected
6.1.142 through 6.1.*Not affected
6.6.95 through 6.6.*Not affected
6.12.35 through 6.12.*Not affected
6.15.4 through 6.15.*Not affected
6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.