Back to CVE records
High 7.8Published Sep 7, 2025
CVE-2025-39730NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()
Updated under an hour ago ()
Does this affect you?
It affects Linux and 2 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() The function needs to check the minimal filehandle length before it can access the embedded filehandle.
- CVSS
- 7.8 HIGH (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Analyzed
- Record last updated
- Jun 11, 2026
- First seen by InfoSec Signals
- Oct 19, 2026
Affected products
Linux Linux linux:linux (from the name) | 20fa19027286983ab2734b5910c4a687436e0c31 builds before 7f8eca87fef7519e9c41f3258f25ebc2752247ee; from 20fa19027286983ab2734b5910c4a687436e0c31 before cb09afa0948d96b1e385d609ed044bb1aa043536; from 20fa19027286983ab2734b5910c4a687436e0c31 before 3570ef5c31314c13274c935a20b91768ab5bf412; from 20fa19027286983ab2734b5910c4a687436e0c31 before 763810bb883cb4de412a72f338d80947d97df67b; 20fa19027286983ab2734b5910c4a687436e0c31 builds before 12ad3def2e5e0b120e3d0cb6ce8b7b796819ad40; 20fa19027286983ab2734b5910c4a687436e0c31 builds before 2ad40b7992aa26bc631afc1a995b0e3ddc30de3f; from 20fa19027286983ab2734b5910c4a687436e0c31 before b7f7866932466332a2528fda099000b035303485; 20fa19027286983ab2734b5910c4a687436e0c31 builds before 7dd36f7477d1e03a1fcf8d13531ca326c4fb599f; and 1 more ranges | CNA record |
linux linux_kernel linux:linux_kernel | from 4.13 before 5.4.297; from 5.5 before 5.10.241; from 5.11 before 5.15.190; from 5.16 before 6.1.148; from 6.2 before 6.6.102; from 6.7 before 6.12.42; from 6.13 before 6.15.10; from 6.16 before 6.16.1 | NVD |
debian debian_linux debian:debian_linux | 11.0 | NVD |
References
- https://git.kernel.org/stable/c/7f8eca87fef7519e9c41f3258f25ebc2752247eepatch
- https://git.kernel.org/stable/c/cb09afa0948d96b1e385d609ed044bb1aa043536patch
- https://git.kernel.org/stable/c/3570ef5c31314c13274c935a20b91768ab5bf412patch
- https://git.kernel.org/stable/c/763810bb883cb4de412a72f338d80947d97df67bpatch
- https://git.kernel.org/stable/c/12ad3def2e5e0b120e3d0cb6ce8b7b796819ad40patch
- https://git.kernel.org/stable/c/2ad40b7992aa26bc631afc1a995b0e3ddc30de3fpatch
- https://git.kernel.org/stable/c/b7f7866932466332a2528fda099000b035303485patch
- https://git.kernel.org/stable/c/7dd36f7477d1e03a1fcf8d13531ca326c4fb599fpatch
- https://git.kernel.org/stable/c/ef93a685e01a281b5e2a25ce4e3428cf9371a205patch
- https://lists.debian.org/debian-lts-announce/2025/10/msg00007.htmlmailing-list, third-party-advisory
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.htmlmailing-list, third-party-advisory
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.