CVE-2025-38232 describes a race condition in the Linux kernel's NFS daemon (NFSD) that can lead to a kernel panic (OOPs). This vulnerability affects various versions of the Linux kernel, including ARM64 architectures. The issue arises from a timing conflict between NFSD registration and the exports_proc cleanup, specifically when exportfs -r and mount -t nfsd operations occur concurrently. The vulnerability has a CVSS score of 4.7 (Medium), indicating a local attack vector with high attack complexity, requiring low privileges, and resulting in high availability impact (system crash). There is no confidentiality or integrity impact. Currently, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. However, the vulnerability has garnered some community attention with two mentions and two media articles, suggesting awareness within the security community.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 6.12.35CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.13, < 6.15.4CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 5.10.20, < 5.11CPE match | cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 5.11.3, < 5.12CPE match | cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 5.4.102, < 5.5CPE match | cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.4 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Linux kernel (Xilinx ZynqMP) vulnerabilities
May 19, 2026Linux kernel (Raspberry Pi) vulnerabilities
May 11, 2026Linux kernel (Azure) vulnerabilities
May 7, 2026Linux kernel (IBM) vulnerabilities
Apr 24, 2026Linux kernel (Azure FIPS) vulnerabilities
Apr 23, 2026Linux kernel vulnerabilities
Apr 23, 2026Linux kernel (HWE) vulnerabilities
Apr 17, 2026Linux kernel (NVIDIA) vulnerabilities
Apr 17, 2026Linux kernel (Real-time) vulnerabilities
Apr 17, 2026Linux kernel (FIPS) vulnerabilities
Apr 17, 2026Linux kernel vulnerabilities
Apr 16, 2026Linux kernel (NVIDIA Tegra) vulnerabilities
Apr 9, 2026Linux kernel (Azure) vulnerabilities
Mar 25, 2026Linux kernel (Azure FIPS) vulnerabilities
Mar 4, 2026Linux kernel (Azure) vulnerabilities
Mar 4, 2026Linux kernel (Xilinx) vulnerabilities
Feb 24, 2026Linux kernel (IBM) vulnerabilities
Feb 24, 2026NFSD: fix race between nfsd registration and exports_proc
Jul 8, 2025kernel: NFSD: fix race between nfsd registration and exports_proc
Jul 4, 2025