Riskcovery

CVE-2025-39730

NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()

State
Published
Severity
Not scored
Published
Sep 7, 2025
Updated
Jun 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()

The function needs to check the minimal filehandle length before it can access the embedded filehandle.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 20fa19027286983ab2734b5910c4a687436e0c31 to before 7f8eca87fef7519e9c41f3258f25ebc2752247eeAffected
  • 20fa19027286983ab2734b5910c4a687436e0c31 to before cb09afa0948d96b1e385d609ed044bb1aa043536Affected
  • 20fa19027286983ab2734b5910c4a687436e0c31 to before 3570ef5c31314c13274c935a20b91768ab5bf412Affected
  • 20fa19027286983ab2734b5910c4a687436e0c31 to before 763810bb883cb4de412a72f338d80947d97df67bAffected
  • 20fa19027286983ab2734b5910c4a687436e0c31 to before 12ad3def2e5e0b120e3d0cb6ce8b7b796819ad40Affected
  • 20fa19027286983ab2734b5910c4a687436e0c31 to before 2ad40b7992aa26bc631afc1a995b0e3ddc30de3fAffected
  • 20fa19027286983ab2734b5910c4a687436e0c31 to before b7f7866932466332a2528fda099000b035303485Affected
  • 20fa19027286983ab2734b5910c4a687436e0c31 to before 7dd36f7477d1e03a1fcf8d13531ca326c4fb599fAffected
  • 20fa19027286983ab2734b5910c4a687436e0c31 to before ef93a685e01a281b5e2a25ce4e3428cf9371a205Affected
LinuxLinux
  • 4.13Affected
  • before 4.13Not affected
  • 5.4.297 through 5.4.*Not affected
  • 5.10.241 through 5.10.*Not affected
  • 5.15.190 through 5.15.*Not affected
  • 6.1.148 through 6.1.*Not affected
  • 6.6.102 through 6.6.*Not affected
  • 6.12.42 through 6.12.*Not affected
  • 6.15.10 through 6.15.*Not affected
  • 6.16.1 through 6.16.*Not affected
  • 6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.