CVE-2025-40324

High

Description

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix crash in nfsd4_read_release() When tracing is enabled, the trace_nfsd_read_done trace point crashes during the pynfs read.testNoFh test.

SeverityHigh
CVSS7.5
Exploit probability—
ProductLinux
PublishedDec 8, 2025
First seenDec 8, 2025

How to fix

Update
  • Linux Linux930cb4fe3ab4061be31f20ee30bb72a66f7bb6d1, 375fdd8993cecc48afa359728a6e70b280dde1c8, 2ac46606b2cc49e78d8e3d8f2685e79e9ba73020, 03524ccff698d4a77d096ed529073d91f5edee5d, a4948875ed0599c037dc438c11891c9012721b1d, 8f244b773c63fa480c9a3bd1ae04f5272f285e89, abb1f08a2121dd270193746e43b2a9373db9ad84, 5.10.247, 5.15.197, 6.1.159, 6.3 or later

Affected products

ProductAffected versionsFixed in
Linux Linux65a33135e91e6dd661ecdf1194b9d90c49ae3570 ≤ v < 930cb4fe3ab4061be31f20ee30bb72a66f7bb6d1, b11d8162c24af4a351d21e2c804d25ca493305e3 ≤ v < 375fdd8993cecc48afa359728a6e70b280dde1c8, b623a8e5d38a69a3ef8644acb1030dd7c7bc28b3 ≤ v < 2ac46606b2cc49e78d8e3d8f2685e79e9ba73020, 15a8b55dbb1ba154d82627547c5761cac884d810 ≤ v < 03524ccff698d4a77d096ed529073d91f5edee5d, 15a8b55dbb1ba154d82627547c5761cac884d810 ≤ v < a4948875ed0599c037dc438c11891c9012721b1d, 15a8b55dbb1ba154d82627547c5761cac884d810 ≤ v < 8f244b773c63fa480c9a3bd1ae04f5272f285e89, 15a8b55dbb1ba154d82627547c5761cac884d810 ≤ v < abb1f08a2121dd270193746e43b2a9373db9ad84, 3d0dcada384af22dec764c8374a2997870ec86ae, 5.10.220 ≤ v < 5.10.247, 5.15.154 ≤ v < 5.15.197, 6.1.24 ≤ v < 6.1.159, 6.2.11 ≤ v < 6.3, 6.3930cb4fe3ab4061be31f20ee30bb72a66f7bb6d1, 375fdd8993cecc48afa359728a6e70b280dde1c8, 2ac46606b2cc49e78d8e3d8f2685e79e9ba73020, 03524ccff698d4a77d096ed529073d91f5edee5d, a4948875ed0599c037dc438c11891c9012721b1d, 8f244b773c63fa480c9a3bd1ae04f5272f285e89, abb1f08a2121dd270193746e43b2a9373db9ad84, 5.10.247, 5.15.197, 6.1.159, 6.3

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.