CVE-2025-39730: NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()
Published Sep 7, 2025
·Updated
In the Linux kernel, the following vulnerability has been resolved:
NFS: Fix filehandle bounds checking in nfsfhtodentry()
The function needs to check the minimal filehandle length before it can access the embedded filehandle.
Affected Software
230 affected componentsFixes available
Linux Linux kernel
Microsoft azl3 kernel 6.6.96.2-2
Microsoft azl3 kernel 6.6.96.2-1
Microsoft cbl2 kernel 5.15.186.1-1
IBM Cloud Pak for Data System<=1.0.0.0- 1.0.8.4
Linux Linux kernel>=4.13<5.4.297
Linux Linux kernel>=5.5<5.10.241
Linux Linux kernel>=5.11<5.15.190
Linux Linux kernel>=5.16<6.1.148
Linux Linux kernel>=6.2<6.6.102
Linux Linux kernel>=6.7<6.12.42
Linux Linux kernel>=6.13<6.15.10
Linux Linux kernel>=6.16<6.16.1
Debian Debian Linux=11.0
ubuntu/linux-azure*
ubuntu/linux-aws-hwe*
ubuntu/linux-azure*
ubuntu/linux-gcp*
ubuntu/linux-hwe*
ubuntu/linux-hwe-edge*
ubuntu/linux-oracle*
ubuntu/linux*
ubuntu/linux-aws*
ubuntu/linux-aws-5.0*
ubuntu/linux-aws-5.3*
ubuntu/linux-aws-5.4*
ubuntu/linux-azure*
ubuntu/linux-azure-4.15*
ubuntu/linux-azure-5.3*
ubuntu/linux-azure-5.4<5.4.0-1171.177~18.04.1
5.4.0-1171.177~18.04.1
ubuntu/linux-azure-edge*
ubuntu/linux-gcp*
ubuntu/linux-gcp-4.15*
ubuntu/linux-gcp-5.3*
ubuntu/linux-gcp-5.4<5.4.0-1169.179~18.04.1
5.4.0-1169.179~18.04.1
ubuntu/linux-gke-4.15*
ubuntu/linux-gke-5.4*
ubuntu/linux-gkeop-5.4*
ubuntu/linux-hwe*
ubuntu/linux-hwe-5.4<5.4.0-244.264~18.04.1
5.4.0-244.264~18.04.1
ubuntu/linux-hwe-edge*
ubuntu/linux-ibm-5.4<5.4.0-1112.117~18.04.1
5.4.0-1112.117~18.04.1
ubuntu/linux-kvm*
ubuntu/linux-oem*
ubuntu/linux-oracle*
ubuntu/linux-oracle-5.0*
ubuntu/linux-oracle-5.3*
ubuntu/linux-oracle-5.4<5.4.0-1164.174~18.04.1
5.4.0-1164.174~18.04.1
ubuntu/linux-raspi-5.4*
ubuntu/linux-aws-fips*
ubuntu/linux-azure-fips*
ubuntu/linux-fips*
ubuntu/linux-gcp-fips*
ubuntu/linux-aws-fips*
ubuntu/linux-azure-fips*
ubuntu/linux-fips*
ubuntu/linux-gcp-fips*
ubuntu/linux<5.4.0-244.264
5.4.0-244.264
ubuntu/linux-aws<5.4.0-1166.177
5.4.0-1166.177
ubuntu/linux-aws-5.11*
ubuntu/linux-aws-5.13*
ubuntu/linux-aws-5.15<5.15.0-1097.104~20.04.1
5.15.0-1097.104~20.04.1
ubuntu/linux-aws-5.8*
ubuntu/linux-azure<5.4.0-1171.177
5.4.0-1171.177
ubuntu/linux-azure-5.11*
ubuntu/linux-azure-5.13*
ubuntu/linux-azure-5.15<5.15.0-1102.111~20.04.1
5.15.0-1102.111~20.04.1
ubuntu/linux-azure-5.8*
ubuntu/linux-azure-fde*
ubuntu/linux-bluefield<5.4.0-1125.132
5.4.0-1125.132
ubuntu/linux-gcp<5.4.0-1169.179
5.4.0-1169.179
ubuntu/linux-gcp-5.11*
ubuntu/linux-gcp-5.13*
ubuntu/linux-gcp-5.15<5.15.0-1097.106~20.04.1
5.15.0-1097.106~20.04.1
ubuntu/linux-gcp-5.8*
ubuntu/linux-gke*
ubuntu/linux-gke-5.15*
ubuntu/linux-gkeop*
ubuntu/linux-gkeop-5.15*
ubuntu/linux-hwe-5.11*
ubuntu/linux-hwe-5.13*
ubuntu/linux-hwe-5.15<5.15.0-163.173~20.04.1
5.15.0-163.173~20.04.1
ubuntu/linux-hwe-5.8*
ubuntu/linux-ibm<5.4.0-1112.117
5.4.0-1112.117
ubuntu/linux-ibm-5.15<5.15.0-1091.94~20.04.1
5.15.0-1091.94~20.04.1
ubuntu/linux-intel-5.13*
ubuntu/linux-intel-iotg-5.15<5.15.0-1092.98~20.04.1
5.15.0-1092.98~20.04.1
ubuntu/linux-iot<5.4.0-1070.73
5.4.0-1070.73
ubuntu/linux-kvm<5.4.0-1153.162
5.4.0-1153.162
ubuntu/linux-lowlatency-hwe-5.15<5.15.0-163.173~20.04.1
5.15.0-163.173~20.04.1
ubuntu/linux-nvidia-tegra-5.15<5.15.0-1049.49~20.04.1
5.15.0-1049.49~20.04.1
ubuntu/linux-oem-5.10*
ubuntu/linux-oem-5.13*
ubuntu/linux-oem-5.6*
ubuntu/linux-oracle<5.4.0-1164.174
5.4.0-1164.174
ubuntu/linux-oracle-5.11*
ubuntu/linux-oracle-5.13*
ubuntu/linux-oracle-5.15<5.15.0-1094.100~20.04.1
5.15.0-1094.100~20.04.1
ubuntu/linux-oracle-5.8*
ubuntu/linux-raspi*
ubuntu/linux-raspi2*
ubuntu/linux-riscv*
ubuntu/linux-riscv-5.11*
ubuntu/linux-riscv-5.15<5.15.0-1092.96~20.04.1
5.15.0-1092.96~20.04.1
ubuntu/linux-riscv-5.8*
ubuntu/linux-xilinx-zynqmp<5.4.0-1084.88
5.4.0-1084.88
ubuntu/linux-aws-fips<5.4.0-1166.177+fips1
5.4.0-1166.177+fips1
ubuntu/linux-azure-fips<5.4.0-1171.177+fips1
5.4.0-1171.177+fips1
ubuntu/linux-fips<5.4.0-1140.150
5.4.0-1140.150
ubuntu/linux-gcp-fips<5.4.0-1169.179+fips1
5.4.0-1169.179+fips1
ubuntu/linux-aws-fips*
ubuntu/linux-azure-fips*
ubuntu/linux-fips*
ubuntu/linux-gcp-fips*
ubuntu/linux<5.15.0-163.173
5.15.0-163.173
ubuntu/linux-allwinner-5.19*
ubuntu/linux-aws<5.15.0-1097.104
5.15.0-1097.104
ubuntu/linux-aws-5.19*
ubuntu/linux-aws-6.2*
ubuntu/linux-aws-6.5*
ubuntu/linux-aws-6.8<6.8.0-1046.49~22.04.1
6.8.0-1046.49~22.04.1
ubuntu/linux-azure<5.15.0-1101.110
5.15.0-1101.110
ubuntu/linux-azure-5.19*
ubuntu/linux-azure-6.2*
ubuntu/linux-azure-6.5*
ubuntu/linux-azure-6.8<6.8.0-1051.57~22.04.1
6.8.0-1051.57~22.04.1
ubuntu/linux-azure-fde<5.15.0-1102.111.1
5.15.0-1102.111.1
ubuntu/linux-azure-fde-5.19*
ubuntu/linux-azure-fde-6.2*
ubuntu/linux-azure-fde-6.8<6.8.0-1046.53~22.04.1
6.8.0-1046.53~22.04.1
ubuntu/linux-gcp<5.15.0-1097.106
5.15.0-1097.106
ubuntu/linux-gcp-5.19*
ubuntu/linux-gcp-6.2*
ubuntu/linux-gcp-6.5*
ubuntu/linux-gcp-6.8<6.8.0-1047.50~22.04.2
6.8.0-1047.50~22.04.2
ubuntu/linux-gke<5.15.0-1093.99
5.15.0-1093.99
ubuntu/linux-gkeop<5.15.0-1080.88
5.15.0-1080.88
ubuntu/linux-hwe-5.19*
ubuntu/linux-hwe-6.2*
ubuntu/linux-hwe-6.5*
ubuntu/linux-hwe-6.8<6.8.0-100.100~22.04.1
6.8.0-100.100~22.04.1
ubuntu/linux-ibm<5.15.0-1091.94
5.15.0-1091.94
ubuntu/linux-ibm-6.8<6.8.0-1044.44~22.04.1
6.8.0-1044.44~22.04.1
ubuntu/linux-intel-iot-realtime*
ubuntu/linux-intel-iotg<5.15.0-1092.98
5.15.0-1092.98
ubuntu/linux-kvm<5.15.0-1089.94
5.15.0-1089.94
ubuntu/linux-lowlatency<5.15.0-163.173
5.15.0-163.173
ubuntu/linux-lowlatency-hwe-5.19*
ubuntu/linux-lowlatency-hwe-6.2*
ubuntu/linux-lowlatency-hwe-6.5*
ubuntu/linux-lowlatency-hwe-6.8<6.8.0-100.100.1~22.04.1
6.8.0-100.100.1~22.04.1
ubuntu/linux-nvidia<5.15.0-1092.93
5.15.0-1092.93
ubuntu/linux-nvidia-6.2*
ubuntu/linux-nvidia-6.5*
ubuntu/linux-nvidia-6.8<6.8.0-1046.49~22.04.1
6.8.0-1046.49~22.04.1
ubuntu/linux-nvidia-tegra<5.15.0-1049.49
5.15.0-1049.49
ubuntu/linux-nvidia-tegra-igx<5.15.0-1038.38
5.15.0-1038.38
ubuntu/linux-oem-5.17*
ubuntu/linux-oem-6.0*
ubuntu/linux-oem-6.1*
ubuntu/linux-oem-6.5*
ubuntu/linux-oracle<5.15.0-1094.100
5.15.0-1094.100
ubuntu/linux-oracle-6.5*
ubuntu/linux-oracle-6.8<6.8.0-1043.44~22.04.1
6.8.0-1043.44~22.04.1
ubuntu/linux-raspi<5.15.0-1091.94
5.15.0-1091.94
ubuntu/linux-realtime*
ubuntu/linux-riscv*
ubuntu/linux-riscv-5.19*
ubuntu/linux-riscv-6.5*
ubuntu/linux-riscv-6.8<6.8.0-100.100~22.04.1
6.8.0-100.100~22.04.1
ubuntu/linux-starfive-5.19*
ubuntu/linux-starfive-6.2*
ubuntu/linux-starfive-6.5*
ubuntu/linux-xilinx-zynqmp<5.15.0-1061.65
5.15.0-1061.65
ubuntu/linux-bluefield<5.15.0-1081.83
5.15.0-1081.83
ubuntu/linux-intel-iot-realtime<5.15.0-1089.91
5.15.0-1089.91
ubuntu/linux-realtime<5.15.0-1096.105
5.15.0-1096.105
ubuntu/linux-realtime-6.8<6.8.1-1041.42~22.04.1
6.8.1-1041.42~22.04.1
ubuntu/linux-aws-fips*
ubuntu/linux-azure-fips*
ubuntu/linux-fips*
ubuntu/linux-gcp-fips*
ubuntu/linux-aws-fips<5.15.0-1097.104+fips1
5.15.0-1097.104+fips1
ubuntu/linux-azure-fips<5.15.0-1101.110+fips1
5.15.0-1101.110+fips1
ubuntu/linux-fips<5.15.0-163.173+fips1
5.15.0-163.173+fips1
ubuntu/linux-gcp-fips<5.15.0-1097.106+fips1
5.15.0-1097.106+fips1
ubuntu/linux<6.8.0-100.100
6.8.0-100.100
ubuntu/linux-aws<6.8.0-1046.49
6.8.0-1046.49
ubuntu/linux-aws-6.14<6.14.0-1017.17~24.04.1
6.14.0-1017.17~24.04.1
ubuntu/linux-azure<6.8.0-1046.52
6.8.0-1046.52
ubuntu/linux-azure-6.11*
ubuntu/linux-azure-6.14<6.14.0-1017.17~24.04.1
6.14.0-1017.17~24.04.1
ubuntu/linux-azure-fde<6.8.0-1046.53
6.8.0-1046.53
ubuntu/linux-azure-fde-6.14*
ubuntu/linux-azure-nvidia*
ubuntu/linux-azure-nvidia-6.14*
ubuntu/linux-gcp<6.8.0-1047.50
6.8.0-1047.50
ubuntu/linux-gcp-6.11*
ubuntu/linux-gcp-6.14<6.14.0-1020.21~24.04.1
6.14.0-1020.21~24.04.1
ubuntu/linux-gke<6.8.0-1043.48
6.8.0-1043.48
ubuntu/linux-gkeop<6.8.0-1030.33
6.8.0-1030.33
ubuntu/linux-hwe-6.11*
ubuntu/linux-ibm<6.8.0-1044.44
6.8.0-1044.44
ubuntu/linux-intel*
ubuntu/linux-lowlatency<6.8.0-100.100.1
6.8.0-100.100.1
ubuntu/linux-lowlatency-hwe-6.11*
ubuntu/linux-nvidia<6.8.0-1046.49
6.8.0-1046.49
ubuntu/linux-nvidia-6.11*
ubuntu/linux-nvidia-lowlatency<6.8.0-1046.49.1
6.8.0-1046.49.1
ubuntu/linux-nvidia-tegra<6.8.0-1020.20
6.8.0-1020.20
ubuntu/linux-oem-6.11*
ubuntu/linux-oem-6.14<6.14.0-1016.16
6.14.0-1016.16
ubuntu/linux-oem-6.8*
ubuntu/linux-oracle<6.8.0-1043.44
6.8.0-1043.44
ubuntu/linux-oracle-6.14<6.14.0-1017.17~24.04.1
6.14.0-1017.17~24.04.1
ubuntu/linux-raspi<6.8.0-1047.51
6.8.0-1047.51
ubuntu/linux-raspi-realtime*
ubuntu/linux-realtime*
ubuntu/linux-riscv*
ubuntu/linux-riscv-6.14<6.14.0-36.36.1~24.04.1
6.14.0-36.36.1~24.04.1
ubuntu/linux-xilinx<6.8.0-1023.24
6.8.0-1023.24
ubuntu/linux-bluefield<6.8.0-1016.20
6.8.0-1016.20
ubuntu/linux-raspi-realtime<6.8.0-2037.38
6.8.0-2037.38
ubuntu/linux-realtime<6.8.1-1041.42
6.8.1-1041.42
ubuntu/linux-realtime-6.14<6.14.0-1016.16~24.04.1
6.14.0-1016.16~24.04.1
ubuntu/linux-aws-fips<6.8.0-1046.49+fips1
6.8.0-1046.49+fips1
ubuntu/linux-azure-fips<6.8.0-1046.52+fips1
6.8.0-1046.52+fips1
ubuntu/linux-fips<6.8.0-100.100+fips1
6.8.0-100.100+fips1
ubuntu/linux-gcp-fips<6.8.0-1047.50+fips1
6.8.0-1047.50+fips1
ubuntu/linux-azure-fde*
Event History
Sep 7, 2025
CVE Published
via MITRE·03:16 PM
Data Sourced
via MITRE·03:16 PM
Description
Data Sourced
via Red Hat·04:01 PM
DescriptionSeverityAffected Software
Data Sourced
via OSV·04:15 PM
DescriptionSeverityAffected Software
Event
via OSV·04:15 PM
Data Sourced
via NVD·04:15 PM
RemedyDescriptionSeverityAffected Software
Sep 9, 2025
Data Sourced
via Microsoft·01:01 AM
DescriptionSeverityWeaknessAffected Software
Sep 1, 2026
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-39730?
CVE-2025-39730 has been assigned a moderate severity level due to its impact on the integrity of filehandle processing in the Linux kernel.
2
How do I fix CVE-2025-39730?
To fix CVE-2025-39730, update to the latest version of the Linux kernel where the vulnerability has been patched.
3
What are the potential impacts of exploiting CVE-2025-39730?
Exploitation of CVE-2025-39730 could allow unauthorized access or manipulation of the file system via NFS.
4
Which versions of the Linux kernel are affected by CVE-2025-39730?
CVE-2025-39730 affects specific versions of the Linux kernel that handle NFS filehandles without proper bounds checking.
5
Is CVE-2025-39730 related to NFS file system vulnerabilities?
Yes, CVE-2025-39730 is specifically related to vulnerabilities in the NFS file system handling within the Linux kernel.