Linux Kernel Vulnerability in NFS Procedure Handling

CVE-2025-38430

What is CVE-2025-38430?

In the Linux kernel, a vulnerability arises during the processing of NFS requests of type v4 compound. If the request is not properly handled, it may lead to undefined behavior when checking the state. This issue has been mitigated by a patch that ensures checks are performed specifically for the NFSPROC4_COMPOUND procedure, thereby enhancing the security and reliability of NFS operations in the kernel.

References