CVE-2025-38393
BaseFortify
Publication date: 2025-07-25
Last updated on: 2025-11-03
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a race condition in the Linux kernel's NFSv4/pNFS implementation related to the NFS_LAYOUT_DRAIN mechanism. It causes certain systems to hang during writeback operations because tasks wait indefinitely on a page lock or the NFS_LAYOUT_DRAIN bit, even though the expected outstanding count is zero. The issue arises from a timing race between the task waiting and the task waking, which was fixed by applying a synchronization barrier.
How can this vulnerability impact me? :
This vulnerability can cause systems using NFSv4/pNFS to hang or become unresponsive during writeback operations due to tasks waiting indefinitely on locks or flags. This can lead to degraded system performance or downtime in environments relying on NFS for file storage.