CVE-2025-38028

Description

In the Linux kernel, the following vulnerability has been resolved: NFS/localio: Fix a race in nfs_local_open_fh() Once the clp->cl_uuid.lock has been dropped, another CPU could come in and free the struct nfsd_file that was just added. To prevent that from happening, take the RCU read lock before dropping the spin lock.

Reserved 2025-04-16 | Published 2025-06-18 | Updated 2025-06-18 | Assigner Linux

Product status

Default status
unaffected

86e00412254a717ffd5d38dc5ec0ee1cce6281b3 before 185a2f2ddabdcf999823f61de67f86376883920d
affected

86e00412254a717ffd5d38dc5ec0ee1cce6281b3 before fa7ab64f1e2fdc8f2603aab8e0dd20de89cb10d9
affected

Default status
affected

6.14
affected

Any version before 6.14
unaffected

6.14.8
unaffected

6.15
unaffected

References

git.kernel.org/...c/185a2f2ddabdcf999823f61de67f86376883920d

git.kernel.org/...c/fa7ab64f1e2fdc8f2603aab8e0dd20de89cb10d9

cve.org (CVE-2025-38028)

nvd.nist.gov (CVE-2025-38028)

Download JSON