NFSv4 Client Vulnerability in Linux Kernel Affects NFSD Functionality

CVE-2025-40326

What is CVE-2025-40326?

A vulnerability in the NFSD component of the Linux kernel affects how NFSv4 clients handle certain GETATTR requests for new FATTR4 attributes. When clients attempt to query these attributes improperly, the server does not have a defined response, leading to potential failures in request handling. This issue adheres to the stipulations outlined in RFCs, which state that the server must return an appropriate error when unsupported attributes are requested. The failure to manage these requests correctly can cause significant disruptions in NFS operations.

References