PT-2025-36317 · Linux+3 · Linux Kernel+3

Published 2025-08-14 · Updated 2026-04-08 · CVE-2025-39723

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue has been identified in the Linux kernel related to unbuffered write error handling within netfs. When all subrequests in an unbuffered write stream fail, the subrequest collector does not correctly update the transferred value, potentially leading to an incorrect value being returned. This can result in errors, such as an attempt to clean up an excessive amount of pipe bufferage, and ultimately a kernel NULL pointer dereference. The issue was discovered during testing with the generic/750 xfstest against cifs with cache=none, specifically when writes started failing due to insufficient scratch space (ENOSPC).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

NULL Pointer Dereference

Weakness Enumeration

CWE-787

CWE-476

Related Identifiers

BDU:2025-15709

CVE-2025-39723

DSA-6008-1

OPENSUSE-SU-2025:20081-1

SUSE-SU-2025:21074-1

SUSE-SU-2025:21139-1

SUSE-SU-2025:21179-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

References · 1273

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39723.json · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2025:20081-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-39723 · Vendor Advisory
• https://git.kernel.org/stable/c/f08c80af3c9a9849cd178b4843b7c01d103506a1 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:21139-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-39723 · Vendor Advisory
• https://git.kernel.org/stable/c/387164a2b97e1f5404c6d0049a7409bac7d2bc5b · Patch
• https://osv.dev/vulnerability/BELL-CVE-2025-39723 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-39723 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-13-CVE-2025-39723 · Vendor Advisory
• https://git.kernel.org/stable/c/a3de58b12ce074ec05b8741fa28d62ccb1070468 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:21074-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39723 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-39723 · Security Note
• https://linux.oracle.com/errata/ELSA-2025-25754.html · Vendor Advisory