Null Pointer Dereference in Linux Kernel NFS Services

CVE-2025-38231

What is CVE-2025-38231?

A vulnerability exists in the Linux kernel's NFS services where the initialization of nfsd_ssc is delayed. If laundromat_work is triggered before nfsd_ssc is initialized, it can result in a NULL pointer dereference, potentially causing service disruptions. The issue arises when the kernel's wait for userspace responses exceeds expected durations, leading to safety concerns in NFS operations. The fix involves initializing nfsd_ssc before the execution of laundromat_work, thereby enhancing system reliability and security.

References