Home

Description

In the Linux kernel, the following vulnerability has been resolved: nfs/localio: restore creds before releasing pageio data Otherwise if the nfsd filecache code releases the nfsd_file immediately, it can trigger the BUG_ON(cred == current->cred) in __put_cred() when it puts the nfsd_file->nf_file->f-cred.

PUBLISHED Reserved 2025-04-16 | Published 2025-10-01 | Updated 2025-10-01 | Assigner Linux

Product status

Default status
unaffected

b9f5dd57f4a52990963eeb1f1b58d00f717ece69 (git) before 57c1bb02b4fc8eec6eb01736e7fad26dffacf18c
affected

b9f5dd57f4a52990963eeb1f1b58d00f717ece69 (git) before c250be1d75bf80dc5ab46f0b434b746c1868a1ea
affected

b9f5dd57f4a52990963eeb1f1b58d00f717ece69 (git) before 992203a1fba51b025c60ec0c8b0d9223343dea95
affected

Default status
affected

6.12
affected

Any version before 6.12
unaffected

6.12.48 (semver)
unaffected

6.16.8 (semver)
unaffected

6.17 (original_commit_for_fix)
unaffected

References

git.kernel.org/...c/57c1bb02b4fc8eec6eb01736e7fad26dffacf18c

git.kernel.org/...c/c250be1d75bf80dc5ab46f0b434b746c1868a1ea

git.kernel.org/...c/992203a1fba51b025c60ec0c8b0d9223343dea95

cve.org (CVE-2025-39912)

nvd.nist.gov (CVE-2025-39912)

Download JSON