CVE-2025-40324 NFSD: Fix crash in nfsd4_read_release()
A null pointer dereference in the Linux kernel NFSD module causes a crash when tracing is enabled during specific NFS read operations.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-40324?
CVE-2025-40324 is a high-severity vulnerability in Linux, published on 8 Dec 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
NFSD: Fix crash in nfsd4_read_release()
When tracing is enabled, the trace_nfsd_read_done trace point crashes during the pynfs read.testNoFh test.
Which versions are affected by CVE-2025-40324?
How do I fix CVE-2025-40324?
Apply the vendor's patch.
Is CVE-2025-40324 being exploited?
There is no known exploitation of CVE-2025-40324 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2025-40324, DEBIAN-CVE-2025-40324, GHSA-cfr4-frvg-x3c3, ROOT-OS-DEBIAN-12-CVE-2025-40324, ROOT-OS-DEBIAN-13-CVE-2025-40324, ROOT-OS-UBUNTU-2204-CVE-2025-40324 and 2 more.