CVE-2025-39697

20

FAUCET Score

CVE-2025-39697 is a race condition vulnerability in the Linux kernel's NFS implementation, specifically affecting Debian and other Linux distributions. The flaw occurs when updating an existing write, where nfs_inode_remove_request() can succeed prematurely due to a lack of proper page group locking. This vulnerability has a CVSS score of 4.7 (Medium), indicating a local attack vector with high attack complexity, low privileges required, and a high impact on availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		>= 4.14, < 5.10.242CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::
		>= 5.11, < 5.15.191CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::
		>= 5.16, < 6.1.150CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::
		>= 6.2, < 6.6.104CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::
		>= 6.7, < 6.12.44CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::

CVSS Data

CVSS version used by this source: 3.1

4.7MEDIUM

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

Exploitability Score

1.0

Impact Score

3.6

CvssVersion

3.1

Exploit Intelligence

EPSS Score

0.13%

Probability of exploitation in next 30 days

EPSS Percentile

3.1%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.0013 is in the 26th percentile among its peer group of 1,297 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.4 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (52)

microsoftpatch availablevia msrc

Product: 20412-17084Fixed in: 6.6.104.2-1

microsoftpatch availablevia msrc

Product: azl3 kernel 6.6.96.2-2 on Azure Linux 3.0Fixed in: 6.6.104.2-1

microsoftpatch availablevia msrc

Product: 17087-17086Fixed in: 5.15.200.1-1

microsoftpatch availablevia msrc

Product: cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0Fixed in: 5.15.200.1-1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.8 Telecommunications Update ServiceFixed in: kernel-0:4.18.0-477.122.1.el8_8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.8 Update Services for SAP SolutionsFixed in: kernel-0:4.18.0-477.122.1.el8_8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: kernel-0:5.14.0-611.8.1.el9_7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsFixed in: kernel-0:5.14.0-70.153.1.el9_0

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsFixed in: kernel-rt-0:5.14.0-70.153.1.rt21.225.el9_0

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsFixed in: kernel-0:5.14.0-284.146.1.el9_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsFixed in: kernel-rt-0:5.14.0-284.146.1.rt14.431.el9_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-OnFixed in: kernel-0:4.18.0-305.179.1.el8_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.6 Extended Update SupportFixed in: kernel-0:5.14.0-570.79.1.el9_6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 10Fixed in: kernel-0:6.12.0-55.41.1.el10_0

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 10Fixed in: kernel-0:6.12.0-124.9.1.el10_1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: kernel-rt-0:4.18.0-553.85.1.rt7.426.el8_10

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: kernel-0:4.18.0-553.85.1.el8_10

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Advanced Update SupportFixed in: kernel-0:4.18.0-193.178.1.el8_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportFixed in: kernel-0:4.18.0-305.179.1.el8_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: kernel-0:5.14.0-427.100.1.el9_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportFixed in: kernel-0:4.18.0-372.170.1.el8_6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Telecommunications Update ServiceFixed in: kernel-0:4.18.0-372.170.1.el8_6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Update Services for SAP SolutionsFixed in: kernel-0:4.18.0-372.170.1.el8_6

ubuntupatch availablevia ubuntu_usn

Product: linux-azure-6.8 (jammy)Fixed in: 6.8.0-1051.57~22.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-xilinx (noble)Fixed in: 6.8.0-1029.30

ubuntupatch availablevia ubuntu_usn

Product: linux-raspi (noble)Fixed in: 6.8.0-1050.54

ubuntupatch availablevia ubuntu_usn

Product: linux-raspi-realtime (noble)Fixed in: 6.8.0-2040.41

ubuntupatch availablevia ubuntu_usn

Product: linux-azure-fips (noble)Fixed in: 6.8.0-1052.58+fips1

ubuntupatch availablevia ubuntu_usn

Product: linux-azure (noble)Fixed in: 6.8.0-1051.57

ubuntupatch availablevia ubuntu_usn

Product: linux-aws-fips (noble)Fixed in: 6.8.0-1050.53+fips1

ubuntupatch availablevia ubuntu_usn

Product: linux-fips (noble)Fixed in: 6.8.0-106.106+fips1

ubuntupatch availablevia ubuntu_usn

Product: linux-gcp-fips (noble)Fixed in: 6.8.0-1052.55+fips1

ubuntupatch availablevia ubuntu_usn

Product: linux-nvidia-6.8 (jammy)Fixed in: 6.8.0-1049.52~22.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-nvidia (noble)Fixed in: 6.8.0-1049.52

ubuntupatch availablevia ubuntu_usn

Product: linux-nvidia-lowlatency (noble)Fixed in: 6.8.0-1049.52.1

ubuntupatch availablevia ubuntu_usn

Product: linux-gcp-6.8 (jammy)Fixed in: 6.8.0-1052.55~22.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-hwe-6.8 (jammy)Fixed in: 6.8.0-106.106~22.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-ibm-6.8 (jammy)Fixed in: 6.8.0-1049.49~22.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-lowlatency-hwe-6.8 (jammy)Fixed in: 6.8.0-106.106.1~22.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-oracle-6.8 (jammy)Fixed in: 6.8.0-1047.48~22.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux (noble)Fixed in: 6.8.0-106.106

ubuntupatch availablevia ubuntu_usn

Product: linux-aws (noble)Fixed in: 6.8.0-1050.53

ubuntupatch availablevia ubuntu_usn

Product: linux-gcp (noble)Fixed in: 6.8.0-1052.55

ubuntupatch availablevia ubuntu_usn

Product: linux-gke (noble)Fixed in: 6.8.0-1048.53

ubuntupatch availablevia ubuntu_usn

Product: linux-gkeop (noble)Fixed in: 6.8.0-1035.38

ubuntupatch availablevia ubuntu_usn

Product: linux-ibm (noble)Fixed in: 6.8.0-1049.49

ubuntupatch availablevia ubuntu_usn

Product: linux-lowlatency (noble)Fixed in: 6.8.0-106.106.1

ubuntupatch availablevia ubuntu_usn

Product: linux-oracle (noble)Fixed in: 6.8.0-1047.48

ubuntupatch availablevia ubuntu_usn

Product: linux-realtime-6.8 (jammy)Fixed in: 6.8.1-1045.46~22.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-realtime (noble)Fixed in: 6.8.1-1045.46

ubuntupatch availablevia ubuntu_usn

Product: linux-aws-6.8 (jammy)Fixed in: 6.8.0-1050.53~22.04.1

redhatno patchvia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: kernel-rt

Vendor Advisories (12)

ubuntuUSN-8261-1

Linux kernel (Xilinx) vulnerabilities

ubuntuUSN-8165-1

Linux kernel (Azure FIPS) vulnerabilities

ubuntuUSN-8095-5

Linux kernel (Raspberry Pi) vulnerabilities

ubuntuUSN-8126-1

Linux kernel (Azure) vulnerabilities

ubuntuUSN-8125-1

Linux kernel (Azure) vulnerabilities

ubuntuUSN-8095-4

Linux kernel (AWS) vulnerabilities

ubuntuUSN-8095-3

Linux kernel (Real-time) vulnerabilities

ubuntuUSN-8095-2

Linux kernel (FIPS) vulnerabilities

ubuntuUSN-8100-1

Linux kernel (NVIDIA) vulnerabilities

ubuntuUSN-8095-1

Linux kernel vulnerabilities

microsoft2025-Sep/CVE-2025-39697

NFS: Fix a race when updating an existing write

redhatCVE-2025-39697Moderate

kernel: NFS: Fix a race when updating an existing write

References

cert-portal.siemens.com / productcert/html/ssa-032379.html

cert-portal.siemens.com / productcert/html/ssa-082556.html

git.kernel.org / stable/c/0ff42a32784e0f2cb46a46da8e9f473538c13e1b

Patch

git.kernel.org / stable/c/181feb41f0b268e6288bf9a7b984624d7fe2031d

Patch

git.kernel.org / stable/c/202a3432d21ac060629a760fff3b0a39859da3ea

Patch

git.kernel.org / stable/c/76d2e3890fb169168c73f2e4f8375c7cc24a765e

Patch

git.kernel.org / stable/c/92278ae36935a54e65fef9f8ea8efe7e80481ace

Patch

git.kernel.org / stable/c/c32e3c71aaa1c1ba05da88605e2ddd493c58794f

Patch

git.kernel.org / stable/c/f230d40147cc37eb3aef4d50e2e2c06ea73d9a77

Patch

lists.debian.org / debian-lts-announce/2025/10/msg00007.html

Mailing ListThird Party Advisory

lists.debian.org / debian-lts-announce/2025/10/msg00008.html

Mailing ListThird Party Advisory