Critical Vulnerability in Linux Kernel: NFSD FlexFiles Layout Type Crash Risk
Summary
DEBIAN-CVE-2025-40087: In the Linux kernel, the following vulnerability has been resolved: NFSD: Define a proc_layoutcommit for the FlexFiles layout type Avoid a crash if a pNFS client should happen to send a LAYOUTCOMMIT operation on a FlexFi... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is the core component of many operating systems, responsible for managing hardware and system resources. It provides essential services to applications and is known for its stability and performance. However, vulnerabilities can arise due to complex interactions between various components. The specific issue at hand involves the NFSD (Network File System Daemon) and its handling of the FlexFiles layout type, which could lead to system crashes under certain conditions.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified related to the NFSD's handling of the FlexFiles layout type. This issue arises when a pNFS (Parallel Network File System) client sends a LAYOUTCOMMIT operation on a FlexFiles layout, potentially causing the system to crash. This vulnerability could lead to service interruptions and affect the overall stability of systems relying on the Linux kernel for their operations.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it becomes available to mitigate the risk.
Conclusion
The vulnerability identified in the Linux kernel regarding NFSD and FlexFiles layout poses a significant risk of system crashes. Users are urged to update their kernel packages promptly to mitigate this risk. Regular monitoring for vulnerabilities using tools like Vulert can help maintain system security and stability.
See every vulnerability recorded for linux →
FAQ
The NFSD is a daemon that allows file sharing over a network using the Network File System protocol, enabling remote access to files.
FlexFiles layout is a type of layout used in pNFS that allows for flexible file storage and access patterns, improving performance in certain scenarios.
If exploited, this vulnerability can lead to system crashes, affecting the availability and stability of services that rely on the Linux kernel.
Yes, all versions of the Linux kernel in Debian 11, 12, 13, and 14 are affected by this vulnerability. It is crucial to update to the patched version.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software using just a manifest file like package-lock.json. You can check if your application is affected by this vulnerability using the Vulert playground without any signup.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
