CVE-2025-39798

NFS: Fix the setting of capabilities when automounting a new filesystem

State: Published
Severity: 7.3 High
Published: Sep 12, 2025
Updated: Oct 15, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

NFS: Fix the setting of capabilities when automounting a new filesystem

Capabilities cannot be inherited when we cross into a new filesystem. They need to be reset to the minimal defaults, and then probed for again.

Scores

CVSS	Score	Vector	Source
3.1	7.3 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	54ceac4515986030c2502960be620198dd8fe25b to before 95eb0d97ab98a10e966125c1f274e7d0fc0992b3Affected 54ceac4515986030c2502960be620198dd8fe25b to before 73fcb101bb3eb2a552d7856a476b2c0bc3b5ef9eAffected 54ceac4515986030c2502960be620198dd8fe25b to before 3924dab90816d0c683a110628ef386f83a9d1e13Affected 54ceac4515986030c2502960be620198dd8fe25b to before 175afda783e38c0660f2afc0602dd9c83d4e7ee1Affected 54ceac4515986030c2502960be620198dd8fe25b to before 987c20428f067c1c7f29ed0a2bd8c63fa74b1c2cAffected 54ceac4515986030c2502960be620198dd8fe25b to before 816a6f60c2c2b679a33fa4276442bafd11473651Affected 54ceac4515986030c2502960be620198dd8fe25b to before a8ffee4abd8ec9d7a64d394e0306ae64ba139fd2Affected 54ceac4515986030c2502960be620198dd8fe25b to before 50e0fd0050e510e749e1fdd1d7158e419ff8f3b9Affected 54ceac4515986030c2502960be620198dd8fe25b to before b01f21cacde9f2878492cf318fee61bf4ccad323Affected
LinuxLinux	2.6.19Affected before 2.6.19Not affected 5.4.297 through 5.4.Not affected 5.10.241 through 5.10.Not affected 5.15.190 through 5.15.Not affected 6.1.149 through 6.1.Not affected 6.6.103 through 6.6.Not affected 6.12.43 through 6.12.Not affected 6.15.11 through 6.15.Not affected 6.16.2 through 6.16.Not affected 6.17 and laterNot affected

Product

Versions

LinuxLinux

54ceac4515986030c2502960be620198dd8fe25b to before 95eb0d97ab98a10e966125c1f274e7d0fc0992b3Affected
54ceac4515986030c2502960be620198dd8fe25b to before 73fcb101bb3eb2a552d7856a476b2c0bc3b5ef9eAffected
54ceac4515986030c2502960be620198dd8fe25b to before 3924dab90816d0c683a110628ef386f83a9d1e13Affected
54ceac4515986030c2502960be620198dd8fe25b to before 175afda783e38c0660f2afc0602dd9c83d4e7ee1Affected
54ceac4515986030c2502960be620198dd8fe25b to before 987c20428f067c1c7f29ed0a2bd8c63fa74b1c2cAffected
54ceac4515986030c2502960be620198dd8fe25b to before 816a6f60c2c2b679a33fa4276442bafd11473651Affected
54ceac4515986030c2502960be620198dd8fe25b to before a8ffee4abd8ec9d7a64d394e0306ae64ba139fd2Affected
54ceac4515986030c2502960be620198dd8fe25b to before 50e0fd0050e510e749e1fdd1d7158e419ff8f3b9Affected
54ceac4515986030c2502960be620198dd8fe25b to before b01f21cacde9f2878492cf318fee61bf4ccad323Affected

LinuxLinux

2.6.19Affected
before 2.6.19Not affected
5.4.297 through 5.4.*Not affected
5.10.241 through 5.10.*Not affected
5.15.190 through 5.15.*Not affected
6.1.149 through 6.1.*Not affected
6.6.103 through 6.6.*Not affected
6.12.43 through 6.12.*Not affected
6.15.11 through 6.15.*Not affected
6.16.2 through 6.16.*Not affected
6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.