Linux Kernel NFS Automounting Capability Vulnerability

CVE-2025-39798

What is CVE-2025-39798?

A vulnerability exists in the Linux kernel's Network File System (NFS) related to the handling of capabilities during the automounting of new filesystems. When transitioning into a new filesystem, capabilities should be reset to their minimal defaults to prevent unauthorized privilege escalation. This vulnerability could allow unintentional inheritance of elevated privileges, undermining system integrity and security measures. Users are encouraged to ensure their systems are updated to mitigate potential risks associated with this flaw.

References