In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN We found a few different systems hung up in writeback waiting on the same page lock, and one task waiting on the NFS_LAYOUT_DRAIN bit in pnfs_update_layout(), however the pnfs_layout_hdr's plh_outstanding count was zero. It seems most likely that this is another race between the waiter and waker similar to commit ed0172af5d6f ("SUNRPC: Fix a race to wake a sync task"). Fix it up by applying the advised barrier.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/08287df60bac5b008b6bcdb03053988335d3d282 cve-icon cve-icon
https://git.kernel.org/stable/c/1f4da20080718f258e189a2c5f515385fa393da6 cve-icon cve-icon
https://git.kernel.org/stable/c/864a54c1243ed3ca60baa4bc492dede1361f4c83 cve-icon cve-icon
https://git.kernel.org/stable/c/8846fd02c98da8b79e6343a20e6071be6f372180 cve-icon cve-icon
https://git.kernel.org/stable/c/8ca65fa71024a1767a59ffbc6a6e2278af84735e cve-icon cve-icon
https://git.kernel.org/stable/c/c01776287414ca43412d1319d2877cbad65444ac cve-icon cve-icon
https://git.kernel.org/stable/c/e4b13885e7ef1e64e45268feef1e5f0707c47e72 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025072508-CVE-2025-38393-f2e8@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-38393 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-38393 cve-icon
History

Tue, 29 Jul 2025 12:30:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Sat, 26 Jul 2025 12:15:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Fri, 25 Jul 2025 13:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN We found a few different systems hung up in writeback waiting on the same page lock, and one task waiting on the NFS_LAYOUT_DRAIN bit in pnfs_update_layout(), however the pnfs_layout_hdr's plh_outstanding count was zero. It seems most likely that this is another race between the waiter and waker similar to commit ed0172af5d6f ("SUNRPC: Fix a race to wake a sync task"). Fix it up by applying the advised barrier.
Title NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-07-25T12:53:38.104Z

Updated: 2025-07-28T04:20:57.805Z

Reserved: 2025-04-16T04:51:24.011Z

Link: CVE-2025-38393

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-07-25T13:15:28.723

Modified: 2025-07-25T15:29:19.837

Link: CVE-2025-38393

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-07-25T00:00:00Z

Links: CVE-2025-38393 - Bugzilla