CVE-2025-40087

NFSD: Define a proc_layoutcommit for the FlexFiles layout type

State: Published
Severity: 7.5 High
Published: Oct 30, 2025
Updated: Aug 5, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

NFSD: Define a proc_layoutcommit for the FlexFiles layout type

Avoid a crash if a pNFS client should happen to send a LAYOUTCOMMIT operation on a FlexFiles layout.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	9b9960a0ca4773e21c4b153ed355583946346b25 to before a75994dd879401c3e24ff51c2536559f1a53ea27Affected 9b9960a0ca4773e21c4b153ed355583946346b25 to before 34d187e020cbda112a6c6f094f0ca5e6a8672b75Affected 9b9960a0ca4773e21c4b153ed355583946346b25 to before ba88a53d7f5df4191583abf214214efe0cda91d2Affected 9b9960a0ca4773e21c4b153ed355583946346b25 to before da9129ef77786839a3ccd1d7afeeab790bceaa1dAffected 9b9960a0ca4773e21c4b153ed355583946346b25 to before f7353208c91ab004e0179c5fb6c365b0f132f9f0Affected 9b9960a0ca4773e21c4b153ed355583946346b25 to before a156af6a4dc38c2aa7c98e89520a70fb3b3e7df4Affected 9b9960a0ca4773e21c4b153ed355583946346b25 to before 785ec512afa80d0540f2ca797c0e56de747a6083Affected 9b9960a0ca4773e21c4b153ed355583946346b25 to before 4b47a8601b71ad98833b447d465592d847b4dc77Affected
LinuxLinux	4.8Affected before 4.8Not affected 5.4.301 through 5.4.Not affected 5.10.246 through 5.10.Not affected 5.15.196 through 5.15.Not affected 6.1.158 through 6.1.Not affected 6.6.114 through 6.6.Not affected 6.12.55 through 6.12.Not affected 6.17.5 through 6.17.*Not affected 6.18 and laterNot affected

Product

Versions

LinuxLinux

9b9960a0ca4773e21c4b153ed355583946346b25 to before a75994dd879401c3e24ff51c2536559f1a53ea27Affected
9b9960a0ca4773e21c4b153ed355583946346b25 to before 34d187e020cbda112a6c6f094f0ca5e6a8672b75Affected
9b9960a0ca4773e21c4b153ed355583946346b25 to before ba88a53d7f5df4191583abf214214efe0cda91d2Affected
9b9960a0ca4773e21c4b153ed355583946346b25 to before da9129ef77786839a3ccd1d7afeeab790bceaa1dAffected
9b9960a0ca4773e21c4b153ed355583946346b25 to before f7353208c91ab004e0179c5fb6c365b0f132f9f0Affected
9b9960a0ca4773e21c4b153ed355583946346b25 to before a156af6a4dc38c2aa7c98e89520a70fb3b3e7df4Affected
9b9960a0ca4773e21c4b153ed355583946346b25 to before 785ec512afa80d0540f2ca797c0e56de747a6083Affected
9b9960a0ca4773e21c4b153ed355583946346b25 to before 4b47a8601b71ad98833b447d465592d847b4dc77Affected

LinuxLinux

4.8Affected
before 4.8Not affected
5.4.301 through 5.4.*Not affected
5.10.246 through 5.10.*Not affected
5.15.196 through 5.15.*Not affected
6.1.158 through 6.1.*Not affected
6.6.114 through 6.6.*Not affected
6.12.55 through 6.12.*Not affected
6.17.5 through 6.17.*Not affected
6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.