Race Condition in NFS Daemon of Linux Kernel Impacting Multiple Versions

CVE-2025-38232

What is CVE-2025-38232?

A race condition vulnerability exists in the NFS daemon of the Linux kernel, specifically during the registration and cleanup of NFS exports. The problem arises when simultaneous operations, such as re-exporting file systems and mounting the nfsd, occur. This condition can lead to kernel OOPs due to dereferencing a NULL pointer, which ultimately causes system instability and potential crashes. The vulnerability has been addressed in newer kernel versions by ensuring that user-space exporting interfaces are processed in the correct sequence—cleaning up resources before establishing new connections.

References