PT-2025-49452

CVE-2025-40324

·

Published

2025-09-30

·

Updated

2026-10-21

Description by

CVSS 4.0
8.2
High
MetricsAV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A flaw exists in the Network File System Daemon (NFSD) component of the Linux kernel. Specifically, a crash can occur within the nfsd4 read release() function when tracing is enabled, triggered during the pynfs read.testNoFh test. The issue is related to the trace nfsd read done trace point.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Weakness enumeration
CWE-476: NULL Pointer Dereference
CWE-404: Improper Resource Shutdown or Release
Related identifiers
CVE-2025-40324
BDU:2026-10517
CLSA-2026-1786350974
CLSA-2026-1791800936
DLA-4404-1
ECHO-20A1-2B23-5B9C
MGASA-2026-0017
MGASA-2026-0018
OESA-2026-1303
OESA-2026-1304
OESA-2026-1305
OESA-2026-2416
OPENSUSE-SU-2026:20145-1
SUSE-SU-2026:0278-1
SUSE-SU-2026:0281-1
SUSE-SU-2026:0293-1
SUSE-SU-2026:0315-1
SUSE-SU-2026:20207-1
SUSE-SU-2026:20220-1
SUSE-SU-2026:20228-1
SUSE-SU-2026:20477-1
SUSE-SU-2026:20498-1
SUSE-SU-2026:20564-1
SUSE-SU-2026:20845-1
SUSE-SU-2026:20876-1
USN-8029-1
USN-8029-2
USN-8029-3
USN-8030-1
USN-8048-1
USN-8095-1
USN-8095-2
USN-8095-3
USN-8095-4
USN-8095-5
USN-8096-1
USN-8096-2
USN-8096-3
USN-8096-4
USN-8096-5
USN-8100-1
USN-8116-1
USN-8125-1
USN-8126-1
USN-8141-1
USN-8163-1
USN-8163-2
USN-8165-1
USN-8243-1
USN-8261-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com