CVE-2025-39798: NFS: Fix the setting of capabilities when automounting a new filesystem
In the Linux kernel, the following vulnerability has been resolved:
NFS: Fix the setting of capabilities when automounting a new filesystem
Capabilities cannot be inherited when we cross into a new filesystem. They need to be reset to the minimal defaults, and then probed for again.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Reset NFS/Linux kernel capabilities to minimal defaults after automounting a new filesystem, then probe again (capabilities cannot be inherited across filesystem boundaries).
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39798?
CVE-2025-39798 has a severity rating of medium due to potential unauthorized access risks.
How do I fix CVE-2025-39798?
To fix CVE-2025-39798, update your Linux kernel to the latest patched version.
What impact does CVE-2025-39798 have on NFS filesystems?
CVE-2025-39798 affects NFS filesystems by improperly handling capabilities when automounting new filesystems.
Which versions of the Linux kernel are affected by CVE-2025-39798?
CVE-2025-39798 affects multiple versions of the Linux kernel prior to the patch release addressing this issue.
Is CVE-2025-39798 related to security permissions?
Yes, CVE-2025-39798 is related to security permissions as it deals with the inheritance of capabilities during filesystem transitions.