CVE-2025-39730

HIGH

Linux Kernel - Denial of Service via NFS Filehandle Bounds Check

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() The function needs to check the minimal filehandle length before it can access the embedded filehandle.

References (11)

Core 11
Core References

Scores

CVSS v3 7.8
EPSS 0.0003
EPSS Percentile 7.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (30)
debian/debian_linux 11.0
linux/Kernel 4.13.0 - 5.4.297linux
linux/Kernel 5.11.0 - 5.15.190linux
linux/Kernel 5.16.0 - 6.1.148linux
linux/Kernel 5.5.0 - 5.10.241linux
linux/Kernel 6.13.0 - 6.15.10linux
linux/Kernel 6.16.0 - 6.16.1linux
linux/Kernel 6.2.0 - 6.6.102linux
linux/Kernel 6.7.0 - 6.12.42linux
Linux/Linux < 4.13
... and 20 more
Published Sep 07, 2025
Tracked Since Feb 18, 2026