CVE-2025-21900

High

Description

In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix a deadlock when recovering state on a sillyrenamed file If the file is sillyrenamed, and slated for delete on close, it is possible for a server reboot to triggeer an open reclaim, with can again race with the application call to close(). When that happens, the call to put_nfs_open_context() can trigger a synchronous delegreturn call which deadlocks because it is not marked as privileged. Instead, ensure that the call to nfs4_inode_return_delegation_on_close() catches the delegreturn, and schedules it asynchronously.

SeverityHigh
CVSS7.5
Exploit probability—
ProductLinux Kernel
PublishedApr 1, 2025
First seenApr 1, 2025
Weakness typeCWE-667CWE-667

How to fix

Update
  • linux linux_kernel6.12.18, 6.13.6 or later

Affected products

ProductAffected versionsFixed in
linux linux_kernel6.11 ≤ v < 6.12.18, 6.13 ≤ v < 6.13.6, 6.146.12.18, 6.13.6

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.