PT-2025-28007 · Linux+5 · Linux Kernel+5
CVE-2025-38232
·
Publicado
2025-03-06
·
Atualizado
2026-05-26
CVSS v3.1
4.7
Média
| Vetor | AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to the fixed version
Description:
A race condition exists between nfsd registration and exports proc, which can cause a kernel OOPs. This issue is triggered by a race between the
exportfs -r command and the mount -t nfsd none /proc/fs/nfsd command. The estimated number of potentially affected devices is not specified. Technical details about exploitation include the exports net open() function and the cache seq next rcu() function. The issue can be reproduced using a script that continuously runs the exportfs -r command and mounts and unmounts the nfsd filesystem.Recommendations:
For Linux kernel versions prior to the fixed version: update to a version that includes the fix for the NFSD race condition between nfsd registration and exports proc.
As a temporary workaround, consider disabling the
nfsd module until a patch is available.
Restrict access to the /proc/fs/nfsd filesystem to minimize the risk of exploitation.
Avoid using the exportfs -r command and the mount -t nfsd none /proc/fs/nfsd command simultaneously until the issue is resolved.Exploit
Correção
DoS
NULL Pointer Dereference
Race Condition
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu