CVE-2025-40087

High

Description

In the Linux kernel, the following vulnerability has been resolved: NFSD: Define a proc_layoutcommit for the FlexFiles layout type Avoid a crash if a pNFS client should happen to send a LAYOUTCOMMIT operation on a FlexFiles layout.

SeverityHigh
CVSS7.5
Exploit probability—
ProductLinux
PublishedOct 30, 2025
First seenOct 30, 2025

How to fix

Update
  • Linux Linuxa75994dd879401c3e24ff51c2536559f1a53ea27, 34d187e020cbda112a6c6f094f0ca5e6a8672b75, ba88a53d7f5df4191583abf214214efe0cda91d2, da9129ef77786839a3ccd1d7afeeab790bceaa1d, f7353208c91ab004e0179c5fb6c365b0f132f9f0, a156af6a4dc38c2aa7c98e89520a70fb3b3e7df4, 785ec512afa80d0540f2ca797c0e56de747a6083, 4b47a8601b71ad98833b447d465592d847b4dc77 or later

Affected products

ProductAffected versionsFixed in
Linux Linux9b9960a0ca4773e21c4b153ed355583946346b25 ≤ v < a75994dd879401c3e24ff51c2536559f1a53ea27, 9b9960a0ca4773e21c4b153ed355583946346b25 ≤ v < 34d187e020cbda112a6c6f094f0ca5e6a8672b75, 9b9960a0ca4773e21c4b153ed355583946346b25 ≤ v < ba88a53d7f5df4191583abf214214efe0cda91d2, 9b9960a0ca4773e21c4b153ed355583946346b25 ≤ v < da9129ef77786839a3ccd1d7afeeab790bceaa1d, 9b9960a0ca4773e21c4b153ed355583946346b25 ≤ v < f7353208c91ab004e0179c5fb6c365b0f132f9f0, 9b9960a0ca4773e21c4b153ed355583946346b25 ≤ v < a156af6a4dc38c2aa7c98e89520a70fb3b3e7df4, 9b9960a0ca4773e21c4b153ed355583946346b25 ≤ v < 785ec512afa80d0540f2ca797c0e56de747a6083, 9b9960a0ca4773e21c4b153ed355583946346b25 ≤ v < 4b47a8601b71ad98833b447d465592d847b4dc77, 4.8a75994dd879401c3e24ff51c2536559f1a53ea27, 34d187e020cbda112a6c6f094f0ca5e6a8672b75, ba88a53d7f5df4191583abf214214efe0cda91d2, da9129ef77786839a3ccd1d7afeeab790bceaa1d, f7353208c91ab004e0179c5fb6c365b0f132f9f0, a156af6a4dc38c2aa7c98e89520a70fb3b3e7df4, 785ec512afa80d0540f2ca797c0e56de747a6083, 4b47a8601b71ad98833b447d465592d847b4dc77

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.