CVE-2025-38139 netfs: Fix oops in write-retry from mis-resetting the subreq iterator

🗓️ 03 Jul 2025 08:35:41Reported by GoogleType

osv

osv🔗 osv.dev👁 4 Views

Linux kernel CVE-2025-38139 fix prevents slab-out-of-bounds error in netfs write retry process

Reporter	Title	Published	Views	Family All 85
Tenable Nessus	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2025-1130)	4 Aug 202500:00	–	nessus
Tenable Nessus	Ubuntu 24.04 LTS / 25.04 : Linux kernel vulnerabilities (USN-7769-1)	25 Sep 202500:00	–	nessus
Tenable Nessus	Ubuntu 25.04 : Linux kernel (Azure) vulnerabilities (USN-7770-1)	25 Sep 202500:00	–	nessus
Tenable Nessus	Ubuntu 24.04 LTS : Linux kernel (OEM) vulnerabilities (USN-7771-1)	25 Sep 202500:00	–	nessus
Tenable Nessus	Ubuntu 24.04 LTS : Linux kernel (Oracle) vulnerabilities (USN-7789-1)	2 Oct 202500:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2025-38139	11 Aug 202500:00	–	nessus
Amazon	Important: kernel6.12	8 Aug 202500:00	–	amazon
AstraLinux	Astra Linux - уязвимость в linux-5.10	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the netfs_retry_write_stream() function in the fs/netfs/write_retry.c module of the Linux operating system allows a attacker to cause a service failure.	11 Aug 202500:00	–	bdu_fstec
CNNVD	Linux kernel 安全漏洞	3 Jul 202500:00	–	cnnvd

Source	Link
git	www.git.kernel.org/stable/c/4481f7f2b3df123ec77e828c849138f75cff2bf2
git	www.git.kernel.org/stable/c/bd0edaf99a920b1a9decd773179caacacb61d0fd
git	www.git.kernel.org/stable/c/e0fefe9bc07e6101fdc57abda3644f296c114e31
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38139.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-38139
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

02 Apr 2026 12:47Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.17.1

EPSS0.00061

linux kernel cve-2025-38139 vulnerability fix netfs slab-out-of-bounds error iterator reset