1. Home
  2. Vulnerabilities
  3. CVE-2025-39798
0.0
NA
CVE-2025-39798
NFS: Fix the setting of capabilities when automounting a new filesystem
Description

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix the setting of capabilities when automounting a new filesystem Capabilities cannot be inherited when we cross into a new filesystem. They need to be reset to the minimal defaults, and then probed for again.

INFO

Published Date :

Sept. 12, 2025, 4:15 p.m.

Last Modified :

Sept. 12, 2025, 4:15 p.m.

Remotely Exploit :

No

Source :

416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Products

The following products are affected by CVE-2025-39798 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Linux linux_kernel
: Total Affected Vendor : 1 | Products : 1
Solution
Apply kernel updates to ensure proper capability inheritance for NFS automounts.
  • Update the Linux kernel to the latest version.
  • Verify NFS automount functionality.
  • Test capability inheritance after update.
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2025-39798.

URL Resource
https://git.kernel.org/stable/c/175afda783e38c0660f2afc0602dd9c83d4e7ee1
https://git.kernel.org/stable/c/3924dab90816d0c683a110628ef386f83a9d1e13
https://git.kernel.org/stable/c/50e0fd0050e510e749e1fdd1d7158e419ff8f3b9
https://git.kernel.org/stable/c/73fcb101bb3eb2a552d7856a476b2c0bc3b5ef9e
https://git.kernel.org/stable/c/816a6f60c2c2b679a33fa4276442bafd11473651
https://git.kernel.org/stable/c/95eb0d97ab98a10e966125c1f274e7d0fc0992b3
https://git.kernel.org/stable/c/987c20428f067c1c7f29ed0a2bd8c63fa74b1c2c
https://git.kernel.org/stable/c/a8ffee4abd8ec9d7a64d394e0306ae64ba139fd2
https://git.kernel.org/stable/c/b01f21cacde9f2878492cf318fee61bf4ccad323
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2025-39798 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2025-39798 weaknesses.

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2025-39798 vulnerability anywhere in the article.

Results are limited to the first 20 news articles due to potential performance issues.

The following table lists the changes that have been made to the CVE-2025-39798 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Sep. 12, 2025

    Action Type Old Value New Value
    Added Description In the Linux kernel, the following vulnerability has been resolved: NFS: Fix the setting of capabilities when automounting a new filesystem Capabilities cannot be inherited when we cross into a new filesystem. They need to be reset to the minimal defaults, and then probed for again.
    Added Reference https://git.kernel.org/stable/c/175afda783e38c0660f2afc0602dd9c83d4e7ee1
    Added Reference https://git.kernel.org/stable/c/3924dab90816d0c683a110628ef386f83a9d1e13
    Added Reference https://git.kernel.org/stable/c/50e0fd0050e510e749e1fdd1d7158e419ff8f3b9
    Added Reference https://git.kernel.org/stable/c/73fcb101bb3eb2a552d7856a476b2c0bc3b5ef9e
    Added Reference https://git.kernel.org/stable/c/816a6f60c2c2b679a33fa4276442bafd11473651
    Added Reference https://git.kernel.org/stable/c/95eb0d97ab98a10e966125c1f274e7d0fc0992b3
    Added Reference https://git.kernel.org/stable/c/987c20428f067c1c7f29ed0a2bd8c63fa74b1c2c
    Added Reference https://git.kernel.org/stable/c/a8ffee4abd8ec9d7a64d394e0306ae64ba139fd2
    Added Reference https://git.kernel.org/stable/c/b01f21cacde9f2878492cf318fee61bf4ccad323
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
Vulnerability Scoring Details
No CVSS metrics available for this vulnerability.