Medium severity4.7NVD Advisory· Published Jun 18, 2025· Updated Jun 17, 2026

CVE-2025-38028

Description

In the Linux kernel, the following vulnerability has been resolved:

NFS/localio: Fix a race in nfs_local_open_fh()

Once the clp->cl_uuid.lock has been dropped, another CPU could come in and free the struct nfsd_file that was just added. To prevent that from happening, take the RCU read lock before dropping the spin lock.

Affected products

Linux/Kernelllm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 6.14
osv-coords
pkg:linux/kernel
Range: >= 6.14.0, < 6.14.8

Patches

Vulnerability mechanics

References

git.kernel.org/stable/c/185a2f2ddabdcf999823f61de67f86376883920dnvdPatch
git.kernel.org/stable/c/fa7ab64f1e2fdc8f2603aab8e0dd20de89cb10d9nvdPatch

News mentions

No linked articles in our index yet.

cvss	0.306
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000