01 Record

CVE-2025-38023

nfs: handle failure of nfs_get_lock_context in unlock path

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

nfs: handle failure of nfs_get_lock_context in unlock path

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.18% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 8.0% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-06-18 09:28Z1 YR AGO

Last updated

2026-05-11 21:19Z3 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-476NULL Pointer DereferenceBase
CWE-390Detection of Error Condition Without ActionBase

Data version

5.2

Document digest

c3085b0eec0961f303d7c7692b3e2911d5106630fc5237ead53f347cb7a7455e

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxf30cb757f680f965ba8a2e53cb3588052a01aeb5 to < db6f5ee1fc8f54d079d0751292c2fc2d78e3aad1, f30cb757f680f965ba8a2e53cb3588052a01aeb5 to < 4c189fd40a09a03f9a900bedb2d9064f1734d72a, f30cb757f680f965ba8a2e53cb3588052a01aeb5 to < 72f552e00c50f265896d3c19edc6696aa2910081, f30cb757f680f965ba8a2e53cb3588052a01aeb5 to < 85fb7f8ca5f8c138579fdfc9b97b3083e6077d40, f30cb757f680f965ba8a2e53cb3588052a01aeb5 to < a6879a076b98c99c9fe747816fe1c29543442441, f30cb757f680f965ba8a2e53cb3588052a01aeb5 to < da824f1271633bcb515ca8084cda3eda4b3ace51, f30cb757f680f965ba8a2e53cb3588052a01aeb5 to < f601960af04d2ecb007c928ba153d34051acd9c1, f30cb757f680f965ba8a2e53cb3588052a01aeb5 to < c457dc1ec770a22636b473ce5d35614adfe97636, 4.12—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/db6f5ee1fc8f54d079d0751292c2fc2d78e3aad1
git.kernel.orghttps://git.kernel.org/stable/c/4c189fd40a09a03f9a900bedb2d9064f1734d72a
git.kernel.orghttps://git.kernel.org/stable/c/72f552e00c50f265896d3c19edc6696aa2910081
git.kernel.orghttps://git.kernel.org/stable/c/85fb7f8ca5f8c138579fdfc9b97b3083e6077d40
git.kernel.orghttps://git.kernel.org/stable/c/a6879a076b98c99c9fe747816fe1c29543442441
git.kernel.orghttps://git.kernel.org/stable/c/da824f1271633bcb515ca8084cda3eda4b3ace51
git.kernel.orghttps://git.kernel.org/stable/c/f601960af04d2ecb007c928ba153d34051acd9c1
git.kernel.orghttps://git.kernel.org/stable/c/c457dc1ec770a22636b473ce5d35614adfe97636
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/08/msg00010.html

01 Record index

CVE-2025-38023

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-38023

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References