Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-39730— NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未正确检查文件句柄长度，可能导致越界访问。

AI Predicted 5.5 Difficulty: Hard EPSS 0.20% · P9

Possible ATT&CK Techniques 1 AI

T1203 · Exploitation for Client Execution

Affected Version Matrix 20

VendorProduct Version RangeStatus
Linux Linux 20fa19027286983ab2734b5910c4a687436e0c31< 7f8eca87fef7519e9c41f3258f25ebc2752247ee affected
20fa19027286983ab2734b5910c4a687436e0c31< cb09afa0948d96b1e385d609ed044bb1aa043536 affected
20fa19027286983ab2734b5910c4a687436e0c31< 3570ef5c31314c13274c935a20b91768ab5bf412 affected
20fa19027286983ab2734b5910c4a687436e0c31< 763810bb883cb4de412a72f338d80947d97df67b affected
20fa19027286983ab2734b5910c4a687436e0c31< 12ad3def2e5e0b120e3d0cb6ce8b7b796819ad40 affected
20fa19027286983ab2734b5910c4a687436e0c31< 2ad40b7992aa26bc631afc1a995b0e3ddc30de3f affected
20fa19027286983ab2734b5910c4a687436e0c31< b7f7866932466332a2528fda099000b035303485 affected
20fa19027286983ab2734b5910c4a687436e0c31< 7dd36f7477d1e03a1fcf8d13531ca326c4fb599f affected
… +12 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-39730

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() The function needs to check the minimal filehandle length before it can access the embedded filehandle.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未正确检查文件句柄长度，可能导致越界访问。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 20fa19027286983ab2734b5910c4a687436e0c31 ~ 7f8eca87fef7519e9c41f3258f25ebc2752247ee -
Linux Linux 4.13 -

II. Public POCs for CVE-2025-39730

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-39730

请登录查看更多情报信息。

Same Patch Batch · Linux · 2025-09-07 · 7 CVEs total

CVE-2025-39732 7.8 HIGH wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask()
CVE-2025-39734 Revert "fs/ntfs3: Replace inode_trylock with inode_lock"
CVE-2025-39733 team: replace team lock with rtnl lock
CVE-2025-39731 f2fs: vm_unmap_ram() may be called from an invalid context
CVE-2025-39729 crypto: ccp - Fix dereferencing uninitialized error pointer
CVE-2025-39727 mm: swap: fix potential buffer overflow in setup_clusters()

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2025-39730

No comments yet

Leave a comment