01 Record

CVE-2025-37871

nfsd: decrease sc_count directly if fail to queue dl_recall

HighPUBLISHEDCNA: Linux

CNA base score7.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

View raw JSON

02 Description

nfsd: decrease sc_count directly if fail to queue dl_recall

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.77% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 55.3% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-07-30.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-05-09 06:43Z1 YR AGO

Last updated

2026-08-05 11:57Z2 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.5)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-833DeadlockBase

Data version

5.2

Document digest

3e4c955e1d0df7cd878df2e7f1bf3c8a894530a8f16fcf5152ab134e446ba5c6

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxb874cdef4e67e5150e07eff0eae1cbb21fb92da1 to < b9bbe8f9d5663311d06667ce36d6ed255ead1a26, cdb796137c57e68ca34518d53be53b679351eb86 to < a70832d3555987035fc430ccd703acd89393eadb, d96587cc93ec369031bcd7658c6adc719873c9fd to < ba903539fff745d592d893c71b30e5e268a95413, 9a81cde8c7ce65dd90fb47ceea93a45fc1a2fbd1 to < 7d192e27a431026c58d60edf66dc6cd98d0c01fc, cad3479b63661a399c9df1d0b759e1806e2df3c8 to < a7fce086f6ca84db409b9d58493ea77c1978897c, 133f5e2a37ce08c82d24e8fba65e0a81deae4609 to < 14985d66b9b99c12995dd99d1c6c8dec4114c2a5, 230ca758453c63bd38e4d9f4a21db698f7abada8 to < a1d14d931bf700c1025db8c46d6731aa5cf440f9, 63b91c8ff4589f5263873b24c052447a28e10ef7, 6.13.11 to < 6.14, 5.10.236 to < 5.10.237, 5.15.180 to < 5.15.181, 6.1.134 to < 6.1.135, 6.6.87 to < 6.6.88, 6.12.23 to < 6.12.25, 6.14.2 to < 6.14.4—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/b9bbe8f9d5663311d06667ce36d6ed255ead1a26
git.kernel.orghttps://git.kernel.org/stable/c/a70832d3555987035fc430ccd703acd89393eadb
git.kernel.orghttps://git.kernel.org/stable/c/ba903539fff745d592d893c71b30e5e268a95413
git.kernel.orghttps://git.kernel.org/stable/c/7d192e27a431026c58d60edf66dc6cd98d0c01fc
git.kernel.orghttps://git.kernel.org/stable/c/a7fce086f6ca84db409b9d58493ea77c1978897c
git.kernel.orghttps://git.kernel.org/stable/c/14985d66b9b99c12995dd99d1c6c8dec4114c2a5
git.kernel.orghttps://git.kernel.org/stable/c/a1d14d931bf700c1025db8c46d6731aa5cf440f9
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/05/msg00030.html

07 Fixed in

Debian 12

linux
Fixed in 6.1.135-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.25-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.12.25-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.