PT-2025-29060 · Linux+5 · Linux Kernel+5
Anubis
·
Published
2025-04-23
·
Updated
2026-04-20
·
CVE-2025-38338
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
A double-unlock bug exists in the
nfs return empty folio() function within the NFS read functionality of the Linux kernel. This issue can lead to a deadlock when a file is read concurrently with truncation by another NFS client, due to the incorrect handling of the PG locked flag. Specifically, the folio unlock() function may be called twice, potentially causing processes to become stuck indefinitely while waiting for a folio lock that will never be released. The issue arises from a missing check in nfs return empty folio() when fscache is enabled, and can rarely manifest as a warning in netfs read collection().Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Double Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu