Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-40087— NFSD: Define a proc_layoutcommit for the FlexFiles layout type

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未定义FlexFiles布局类型的proc_layoutcommit，可能导致崩溃。

CVSS 7.5 · High EPSS 0.50% · P42

Possible ATT&CK Techniques 1 AI

T1068 · Exploitation for Privilege Escalation

Affected Version Matrix 18

VendorProduct Version RangeStatus
Linux Linux 9b9960a0ca4773e21c4b153ed355583946346b25< a75994dd879401c3e24ff51c2536559f1a53ea27 affected
9b9960a0ca4773e21c4b153ed355583946346b25< 34d187e020cbda112a6c6f094f0ca5e6a8672b75 affected
9b9960a0ca4773e21c4b153ed355583946346b25< ba88a53d7f5df4191583abf214214efe0cda91d2 affected
9b9960a0ca4773e21c4b153ed355583946346b25< da9129ef77786839a3ccd1d7afeeab790bceaa1d affected
9b9960a0ca4773e21c4b153ed355583946346b25< f7353208c91ab004e0179c5fb6c365b0f132f9f0 affected
9b9960a0ca4773e21c4b153ed355583946346b25< a156af6a4dc38c2aa7c98e89520a70fb3b3e7df4 affected
9b9960a0ca4773e21c4b153ed355583946346b25< 785ec512afa80d0540f2ca797c0e56de747a6083 affected
9b9960a0ca4773e21c4b153ed355583946346b25< 4b47a8601b71ad98833b447d465592d847b4dc77 affected
… +10 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-40087

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
NFSD: Define a proc_layoutcommit for the FlexFiles layout type
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: NFSD: Define a proc_layoutcommit for the FlexFiles layout type Avoid a crash if a pNFS client should happen to send a LAYOUTCOMMIT operation on a FlexFiles layout.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未定义FlexFiles布局类型的proc_layoutcommit，可能导致崩溃。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 9b9960a0ca4773e21c4b153ed355583946346b25 ~ a75994dd879401c3e24ff51c2536559f1a53ea27 -
Linux Linux 4.8 -

II. Public POCs for CVE-2025-40087

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-40087

请登录查看更多情报信息。

Same Patch Batch · Linux · 2025-10-30 · 20 CVEs total

CVE-2025-40099 9.4 CRITICAL cifs: parse_dfs_referrals: prevent oob on malformed input
CVE-2025-40096 7.8 HIGH drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies
CVE-2025-40105 7.8 HIGH vfs: Don't leak disconnected dentries on umount
CVE-2025-40104 7.8 HIGH ixgbevf: fix mailbox API compatibility by negotiating supported features
CVE-2025-40095 7.8 HIGH usb: gadget: f_rndis: Refactor bind path to use __free()
CVE-2025-40094 7.8 HIGH usb: gadget: f_acm: Refactor bind path to use __free()
CVE-2025-40093 7.8 HIGH usb: gadget: f_ecm: Refactor bind path to use __free()
CVE-2025-40092 7.8 HIGH usb: gadget: f_ncm: Refactor bind path to use __free()
CVE-2025-40090 7.5 HIGH ksmbd: fix recursive locking in RPC handle list access
CVE-2025-40088 7.1 HIGH hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp()
CVE-2025-40086 drm/xe: Don't allow evicting of BOs in same VM in array of VM binds
CVE-2025-40097 ALSA: hda: Fix missing pointer check in hda_component_manager_init function
CVE-2025-40098 ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_get_acpi_mute_state()
CVE-2025-40091 ixgbe: fix too early devlink_free() in ixgbe_remove()
CVE-2025-40101 btrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST
CVE-2025-40100 btrfs: do not assert we found block group item when creating free space tree
CVE-2025-40102 KVM: arm64: Prevent access to vCPU events before init
CVE-2025-40103 smb: client: Fix refcount leak for cifs_sb_tlink
CVE-2025-40089 cxl/features: Add check for no entries in cxl_feature_info

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2025-40087

No comments yet

Leave a comment