1. Home
  2. Vulnerabilities
  3. CVE-2025-40324
0.0
NA
CVE-2025-40324
NFSD: Fix crash in nfsd4_read_release()
Description

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix crash in nfsd4_read_release() When tracing is enabled, the trace_nfsd_read_done trace point crashes during the pynfs read.testNoFh test.

INFO

Published Date :

Dec. 8, 2025, 1:16 a.m.

Last Modified :

Dec. 8, 2025, 1:16 a.m.

Remotely Exploit :

No

Source :

416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Products

The following products are affected by CVE-2025-40324 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Linux linux_kernel
: Total Affected Vendor : 1 | Products : 1
Solution
Apply kernel patches to fix a crash in NFSD during NFS read operations.
  • Update the Linux kernel to the resolved version.
  • Apply the specific patch for NFSD: nfsd4_read_release().
  • Ensure tracing is configured correctly if enabled.
  • Test NFS read operations to confirm the fix.
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2025-40324.

URL Resource
https://git.kernel.org/stable/c/03524ccff698d4a77d096ed529073d91f5edee5d
https://git.kernel.org/stable/c/2ac46606b2cc49e78d8e3d8f2685e79e9ba73020
https://git.kernel.org/stable/c/375fdd8993cecc48afa359728a6e70b280dde1c8
https://git.kernel.org/stable/c/8f244b773c63fa480c9a3bd1ae04f5272f285e89
https://git.kernel.org/stable/c/930cb4fe3ab4061be31f20ee30bb72a66f7bb6d1
https://git.kernel.org/stable/c/a4948875ed0599c037dc438c11891c9012721b1d
https://git.kernel.org/stable/c/abb1f08a2121dd270193746e43b2a9373db9ad84
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2025-40324 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2025-40324 weaknesses.

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2025-40324 vulnerability anywhere in the article.

Results are limited to the first 20 news articles due to potential performance issues.

The following table lists the changes that have been made to the CVE-2025-40324 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Dec. 08, 2025

    Action Type Old Value New Value
    Added Description In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix crash in nfsd4_read_release() When tracing is enabled, the trace_nfsd_read_done trace point crashes during the pynfs read.testNoFh test.
    Added Reference https://git.kernel.org/stable/c/03524ccff698d4a77d096ed529073d91f5edee5d
    Added Reference https://git.kernel.org/stable/c/2ac46606b2cc49e78d8e3d8f2685e79e9ba73020
    Added Reference https://git.kernel.org/stable/c/375fdd8993cecc48afa359728a6e70b280dde1c8
    Added Reference https://git.kernel.org/stable/c/8f244b773c63fa480c9a3bd1ae04f5272f285e89
    Added Reference https://git.kernel.org/stable/c/930cb4fe3ab4061be31f20ee30bb72a66f7bb6d1
    Added Reference https://git.kernel.org/stable/c/a4948875ed0599c037dc438c11891c9012721b1d
    Added Reference https://git.kernel.org/stable/c/abb1f08a2121dd270193746e43b2a9373db9ad84
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
Vulnerability Scoring Details
No CVSS metrics available for this vulnerability.