Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2025-40324

Опубликовано: 08 дек. 2025
Источник: redhat
CVSS3: 5.9
EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix crash in nfsd4_read_release() When tracing is enabled, the trace_nfsd_read_done trace point crashes during the pynfs read.testNoFh test.

Отчет

This vulnerability is rated as Moderate severity because, although it can result in a system crash via remote network requests, successful exploitation requires non-default kernel event tracing to be enabled on the host. The flaw exclusively affects systems running as NFS servers where tracing on NFSD read tracepoints has been explicitly activated. Under standard Red Hat Enterprise Linux deployments, dynamic kernel tracing is disabled by default, preventing exploitation under typical operational conditions.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 10kernelFix deferred
Red Hat Enterprise Linux 6kernelOut of support scope
Red Hat Enterprise Linux 7kernelNot affected
Red Hat Enterprise Linux 7kernel-rtNot affected
Red Hat Enterprise Linux 8kernelFix deferred
Red Hat Enterprise Linux 8kernel-rtFix deferred
Red Hat Enterprise Linux 9kernelFix deferred
Red Hat Enterprise Linux 9kernel-rtFix deferred

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-476
https://bugzilla.redhat.com/show_bug.cgi?id=2419872kernel: NFSD: Fix crash in nfsd4_read_release()

EPSS

Процентиль: 40%
0.00455
Низкий

5.9 Medium

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
11 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix crash in nfsd4_read_release() When tracing is enabled, the trace_nfsd_read_done trace point crashes during the pynfs read.testNoFh test.

CVSS3: 7.5
nvd
11 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix crash in nfsd4_read_release() When tracing is enabled, the trace_nfsd_read_done trace point crashes during the pynfs read.testNoFh test.

CVSS3: 5.5
msrc
11 месяцев назад

NFSD: Fix crash in nfsd4_read_release()

CVSS3: 7.5
debian
11 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: N ...

CVSS3: 7.5
github
11 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix crash in nfsd4_read_release() When tracing is enabled, the trace_nfsd_read_done trace point crashes during the pynfs read.testNoFh test.

EPSS

Процентиль: 40%
0.00455
Низкий

5.9 Medium

CVSS3

Уязвимость CVE-2025-40324 в Red Hat CVE — exploitDog