CVE-2025-38028

NFS/localio: Fix a race in nfs_local_open_fh()

published June 18, 2025

CVSS
—
EPSS
0%
Percentile
1.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

NFS/localio: Fix a race in nfs_local_open_fh()

Once the clp->cl_uuid.lock has been dropped, another CPU could come in

and free the struct nfsd_file that was just added. To prevent that from

happening, take the RCU read lock before dropping the spin lock.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00123 · 1.9th percentile
Published
2025-06-18T09:28Z
EPSS history
Timeline
  • 18 JUN 09:28Z
    NFS/localio: Fix a race in nfs_local_open_fh()
    cvelistv5