CVE-2025-38028: NFS/localio: Fix a race in nfs_local_open_fh()

Severity: medium (CVSS 4.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-06-18 · updated 2026-07-30
Weakness: CWE-362

Description

In the Linux kernel, the following vulnerability has been resolved: NFS/localio: Fix a race in nfs_local_open_fh() Once the clp->cl_uuid.lock has been dropped, another CPU could come in and free the struct nfsd_file that was just added. To prevent that from happening, take the RCU read lock before dropping the spin lock.

Affected products

Linux kernel: from 6.14 before 6.14.8; 6.15-rc1, 6.15-rc2, 6.15-rc3, 6.15-rc4, 6.15-rc5, 6.15-rc6 — fixed in 6.14.8

How to fix

Upgrade to a fixed version: Linux kernel 6.14.8. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/185a2f2ddabdcf999823f61de67f86376883920d
https://git.kernel.org/stable/c/fa7ab64f1e2fdc8f2603aab8e0dd20de89cb10d9

Get alerted when CVE-2025-38028 or the next vulnerability affects your stack