VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Oct 1, 2025· Updated Jun 17, 2026

CVE-2025-39912

CVE-2025-39912

Description

In the Linux kernel, the following vulnerability has been resolved:

nfs/localio: restore creds before releasing pageio data

Otherwise if the nfsd filecache code releases the nfsd_file immediately, it can trigger the BUG_ON(cred == current->cred) in __put_cred() when it puts the nfsd_file->nf_file->f-cred.

Affected products

9
  • Linux/Kernel8 versions
    cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=6.12,<6.12.48
    • cpe:2.3:o:linux:linux_kernel:6.17:rc1:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.17:rc2:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.17:rc3:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.17:rc4:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.17:rc5:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: 6.12
  • osv-coords
    pkg:linux/kernel
    Range: >= 6.12.0, < 6.12.48

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.