CVE-2025-39912: nfs/localio: restore creds before releasing pageio data
In the Linux kernel, the following vulnerability has been resolved:
nfs/localio: restore creds before releasing pageio data
Otherwise if the nfsd filecache code releases the nfsdfile immediately, it can trigger the BUGON(cred == current->cred) in putcred() when it puts the nfsdfile->nffile->f-cred.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39912?
CVE-2025-39912 has been classified with a high severity level due to potential exploitation risks in the Linux kernel.
How do I fix CVE-2025-39912?
To fix CVE-2025-39912, ensure that your Linux kernel is updated to the patched version provided by your distribution.
What systems are affected by CVE-2025-39912?
CVE-2025-39912 affects various versions of the Linux kernel, specifically those utilizing NFS file caching.
What type of vulnerability is CVE-2025-39912?
CVE-2025-39912 is a privilege escalation vulnerability related to credential management within the Linux kernel.
Is there a workaround for CVE-2025-39912?
Currently, the best approach is to apply the kernel update rather than rely on a workaround for CVE-2025-39912.