CVE-2025-39730

Summary

In the Linux kernel, the following vulnerability has been resolved:

NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()

The function needs to check the minimal filehandle length before it can access the embedded filehandle.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux20fa19027286983ab2734b5910c4a687436e0c31 < 7f8eca87fef7519e9c41f3258f25ebc2752247eeaffected
LinuxLinux20fa19027286983ab2734b5910c4a687436e0c31 < cb09afa0948d96b1e385d609ed044bb1aa043536affected
LinuxLinux20fa19027286983ab2734b5910c4a687436e0c31 < 3570ef5c31314c13274c935a20b91768ab5bf412affected
LinuxLinux20fa19027286983ab2734b5910c4a687436e0c31 < 763810bb883cb4de412a72f338d80947d97df67baffected
LinuxLinux20fa19027286983ab2734b5910c4a687436e0c31 < 12ad3def2e5e0b120e3d0cb6ce8b7b796819ad40affected
LinuxLinux20fa19027286983ab2734b5910c4a687436e0c31 < 2ad40b7992aa26bc631afc1a995b0e3ddc30de3faffected
LinuxLinux20fa19027286983ab2734b5910c4a687436e0c31 < b7f7866932466332a2528fda099000b035303485affected
LinuxLinux20fa19027286983ab2734b5910c4a687436e0c31 < 7dd36f7477d1e03a1fcf8d13531ca326c4fb599faffected
LinuxLinux20fa19027286983ab2734b5910c4a687436e0c31 < ef93a685e01a281b5e2a25ce4e3428cf9371a205affected
LinuxLinux4.13affected
LinuxLinux0 < 4.13unaffected
LinuxLinux5.4.297 <= 5.4.*unaffected
LinuxLinux5.10.241 <= 5.10.*unaffected
LinuxLinux5.15.190 <= 5.15.*unaffected
LinuxLinux6.1.148 <= 6.1.*unaffected
LinuxLinux6.6.102 <= 6.6.*unaffected
LinuxLinux6.12.42 <= 6.12.*unaffected
LinuxLinux6.15.10 <= 6.15.*unaffected
LinuxLinux6.16.1 <= 6.16.*unaffected
LinuxLinux6.17 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References