CVE-2025-38567
Severity CVSS v4.0:
Pending analysis
Type:
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Publication date:
19/08/2025
Last modified:
26/11/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
nfsd: avoid ref leak in nfsd_open_local_fh()<br />
<br />
If two calls to nfsd_open_local_fh() race and both successfully call<br />
nfsd_file_acquire_local(), they will both get an extra reference to the<br />
net to accompany the file reference stored in *pnf.<br />
<br />
One of them will fail to store (using xchg()) the file reference in<br />
*pnf and will drop that reference but WON&#39;T drop the accompanying<br />
reference to the net. This leak means that when the nfs server is shut<br />
down it will hang in nfsd_shutdown_net() waiting for<br />
&nn->nfsd_net_free_done.<br />
<br />
This patch adds the missing nfsd_net_put().
Impact
Base Score 3.x
4.70
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.15.3 (including) | 6.15.10 (excluding) |
| cpe:2.3:o:linux:linux_kernel:6.16:*:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.17:rc1:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page