{"id":"CVE-2025-39798","revision":"ee6bb8702c8d49128c8ff2d01b90d8cd","records":[{"revision":"ee6bb8702c8d49128c8ff2d01b90d8cd","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-39798","aliases":[],"title":"NFS: Fix the setting of capabilities when automounting a new filesystem","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nNFS: Fix the setting of capabilities when automounting a new filesystem\n\nCapabilities cannot be inherited when we cross into a new filesystem.\nThey need to be reset to the minimal defaults, and then probed for\nagain.","state":0,"publishedAt":"2025-09-12T15:59:34.386+00:00","modifiedAt":"2026-10-15T22:02:32.213+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/nfs/client.c\",\n                        \"fs/nfs/internal.h\",\n                        \"fs/nfs/nfs4client.c\",\n                        \"fs/nfs/nfs4proc.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"54ceac4515986030c2502960be620198dd8fe25b\",\n                            \"lessThan\": \"95eb0d97ab98a10e966125c1f274e7d0fc0992b3\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"54ceac4515986030c2502960be620198dd8fe25b\",\n                            \"lessThan\": \"73fcb101bb3eb2a552d7856a476b2c0bc3b5ef9e\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"54ceac4515986030c2502960be620198dd8fe25b\",\n                            \"lessThan\": \"3924dab90816d0c683a110628ef386f83a9d1e13\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"54ceac4515986030c2502960be620198dd8fe25b\",\n                            \"lessThan\": \"175afda783e38c0660f2afc0602dd9c83d4e7ee1\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"54ceac4515986030c2502960be620198dd8fe25b\",\n                            \"lessThan\": \"987c20428f067c1c7f29ed0a2bd8c63fa74b1c2c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"54ceac4515986030c2502960be620198dd8fe25b\",\n                            \"lessThan\": \"816a6f60c2c2b679a33fa4276442bafd11473651\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"54ceac4515986030c2502960be620198dd8fe25b\",\n                            \"lessThan\": \"a8ffee4abd8ec9d7a64d394e0306ae64ba139fd2\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"54ceac4515986030c2502960be620198dd8fe25b\",\n                            \"lessThan\": \"50e0fd0050e510e749e1fdd1d7158e419ff8f3b9\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"54ceac4515986030c2502960be620198dd8fe25b\",\n                            \"lessThan\": \"b01f21cacde9f2878492cf318fee61bf4ccad323\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/nfs/client.c\",\n                        \"fs/nfs/internal.h\",\n                        \"fs/nfs/nfs4client.c\",\n                        \"fs/nfs/nfs4proc.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"2.6.19\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"2.6.19\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.4.297\",\n                            \"lessThanOrEqual\": \"5.4.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.241\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.190\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.149\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.103\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.43\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.15.11\",\n                            \"lessThanOrEqual\": \"6.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.16.2\",\n                            \"lessThanOrEqual\": \"6.16.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.17\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","score":7.3,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/95eb0d97ab98a10e966125c1f274e7d0fc0992b3","https://git.kernel.org/stable/c/73fcb101bb3eb2a552d7856a476b2c0bc3b5ef9e","https://git.kernel.org/stable/c/3924dab90816d0c683a110628ef386f83a9d1e13","https://git.kernel.org/stable/c/175afda783e38c0660f2afc0602dd9c83d4e7ee1","https://git.kernel.org/stable/c/987c20428f067c1c7f29ed0a2bd8c63fa74b1c2c","https://git.kernel.org/stable/c/816a6f60c2c2b679a33fa4276442bafd11473651","https://git.kernel.org/stable/c/a8ffee4abd8ec9d7a64d394e0306ae64ba139fd2","https://git.kernel.org/stable/c/50e0fd0050e510e749e1fdd1d7158e419ff8f3b9","https://git.kernel.org/stable/c/b01f21cacde9f2878492cf318fee61bf4ccad323"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-39798","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-39798","identifiers":["CVE-2025-39798"]},"retained":false,"historicalAffected":[]}],"coverage":[]}