Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2025-39912

nfs/localio: restore creds before releasing pageio data

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: nfs/localio: restore creds before releasing pageio data Otherwise if the nfsd filecache code releases the nfsd_file immediately, it can trigger the BUG_ON(cred == current->cred) in __put_cred() when it puts the nfsd_file->nf_file->f-cred.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • b9f5dd57f4a52990963eeb1f1b58d00f717ece69 to < 57c1bb02b4fc8eec6eb01736e7fad26dffacf18caffected
  • b9f5dd57f4a52990963eeb1f1b58d00f717ece69 to < c250be1d75bf80dc5ab46f0b434b746c1868a1eaaffected
  • b9f5dd57f4a52990963eeb1f1b58d00f717ece69 to < 992203a1fba51b025c60ec0c8b0d9223343dea95affected

Linux Linux

Default version status: affected

  • 6.12affected
  • 0 to < 6.12unaffected
  • 6.12.48 to ≤ 6.12.*unaffected
  • 6.16.8 to ≤ 6.16.*unaffected
  • 6.17 to ≤ *unaffected

References