01 Record

CVE-2025-39798

NFS: Fix the setting of capabilities when automounting a new filesystem

HighPUBLISHEDCNA: Linux

CNA base score7.3 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

View raw JSON

02 Description

NFS: Fix the setting of capabilities when automounting a new filesystem

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.27% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 19.0% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-07-30.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-09-12 15:59Z11 MO AGO

Last updated

2026-08-05 12:05Z1 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.3)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weaknesses

CWE-270Privilege Context Switching ErrorBase

Data version

5.2

Document digest

97248128bebab18b9c5e730303b4e20a637c75cbe29713efe81ad21b089e42e6

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux54ceac4515986030c2502960be620198dd8fe25b to < 95eb0d97ab98a10e966125c1f274e7d0fc0992b3, 54ceac4515986030c2502960be620198dd8fe25b to < 73fcb101bb3eb2a552d7856a476b2c0bc3b5ef9e, 54ceac4515986030c2502960be620198dd8fe25b to < 3924dab90816d0c683a110628ef386f83a9d1e13, 54ceac4515986030c2502960be620198dd8fe25b to < 175afda783e38c0660f2afc0602dd9c83d4e7ee1, 54ceac4515986030c2502960be620198dd8fe25b to < 987c20428f067c1c7f29ed0a2bd8c63fa74b1c2c, 54ceac4515986030c2502960be620198dd8fe25b to < 816a6f60c2c2b679a33fa4276442bafd11473651, 54ceac4515986030c2502960be620198dd8fe25b to < a8ffee4abd8ec9d7a64d394e0306ae64ba139fd2, 54ceac4515986030c2502960be620198dd8fe25b to < 50e0fd0050e510e749e1fdd1d7158e419ff8f3b9, 54ceac4515986030c2502960be620198dd8fe25b to < b01f21cacde9f2878492cf318fee61bf4ccad323, 2.6.19—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/95eb0d97ab98a10e966125c1f274e7d0fc0992b3
git.kernel.orghttps://git.kernel.org/stable/c/73fcb101bb3eb2a552d7856a476b2c0bc3b5ef9e
git.kernel.orghttps://git.kernel.org/stable/c/3924dab90816d0c683a110628ef386f83a9d1e13
git.kernel.orghttps://git.kernel.org/stable/c/175afda783e38c0660f2afc0602dd9c83d4e7ee1
git.kernel.orghttps://git.kernel.org/stable/c/987c20428f067c1c7f29ed0a2bd8c63fa74b1c2c
git.kernel.orghttps://git.kernel.org/stable/c/816a6f60c2c2b679a33fa4276442bafd11473651
git.kernel.orghttps://git.kernel.org/stable/c/a8ffee4abd8ec9d7a64d394e0306ae64ba139fd2
git.kernel.orghttps://git.kernel.org/stable/c/50e0fd0050e510e749e1fdd1d7158e419ff8f3b9
git.kernel.orghttps://git.kernel.org/stable/c/b01f21cacde9f2878492cf318fee61bf4ccad323
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-082556.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-032379.html

01 Record index

CVE-2025-39798

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-39798

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References