PT-2025-36411 · Linux+9 · Linux Kernel+9

Published 2025-01-01 · Updated 2026-05-26 · CVE-2025-39730

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the NFS functionality of the Linux kernel related to insufficient bounds checking within the nfs fh to dentry() function. This function requires verification of the minimal filehandle length before accessing the embedded filehandle.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALSA-2025:17397

ALSA-2025:17398

ALSA-2025:21931

AZL-67070

AZL-74183

BDU:2025-15706

CESA-2025_17397

CESA-2025_17398

CVE-2025-39730

DLA-4327-1

DLA-4328-1

ECHO-8D56-2CCF-2653

INFSA-2025_17397

INFSA-2025_17398

INFSA-2025_19105

MGASA-2025-0234

MGASA-2025-0235

OESA-2026-1303

OESA-2026-1304

OESA-2026-1305

OPENSUSE-SU-2025:20081-1

RHSA-2025:19105

RHSA-2025:19106

RHSA-2025:19222

RHSA-2025:19886

RHSA-2025:21091

RHSA-2025:21136

RHSA-2025:21931

RHSA-2025_17397

RHSA-2025_17398

RHSA-2025_19105

SUSE-SU-2025:03600-1

SUSE-SU-2025:03634-1

SUSE-SU-2025:20851-1

SUSE-SU-2025:20861-1

SUSE-SU-2025:20870-1

SUSE-SU-2025:20898-1

SUSE-SU-2025:21074-1

SUSE-SU-2025:21139-1

SUSE-SU-2025:21179-1

SUSE-SU-2025:3751-1

SUSE-SU-2025:4057-1

SUSE-SU-2025:4132-1

SUSE-SU-2025:4141-1

USN-7879-1

USN-7879-2

USN-7879-3

USN-7879-4

USN-7880-1

USN-7909-1

USN-7909-2

USN-7909-3

USN-7909-4

USN-7909-5

USN-7910-1

USN-7910-2

USN-7933-1

USN-7934-1

USN-7938-1

USN-8028-1

USN-8028-2

USN-8028-3

USN-8028-4

USN-8028-5

USN-8028-6

USN-8028-7

USN-8028-8

USN-8031-1

USN-8031-2

USN-8031-3

USN-8052-1

USN-8052-2

USN-8074-1

USN-8074-2

USN-8126-1

Affected Products

Almalinux

Centos

Debian

Linuxmint

Linux Kernel

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 3583

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39730.json · Exploit
• https://ubuntu.com/security/CVE-2025-40333 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68222 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38396 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2025-39730 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38576 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39734 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22128 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68183 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-23157 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38642 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38217 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39795 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4328-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39800 · Vendor Advisory