CVE-2025-40237

CVE-2025-40237 is a Linux kernel vulnerability affecting the inotify/fs notify path. The issue occurs when an inotify watch on an overlayfs inode is processed during unmount, leading to a NULL pointer dereference via show_mark_fhandle() -> exportfs_encode_fid() -> ovl_encode_fh() -> ovl_...

CVE-2025-40237 fs/notify: call exportfs_encode_fid with s_umount

In the Linux kernel, the following vulnerability has been resolved: fs/notify: call exportfsencodefid with sumount Calling intotifyshowfdinfo on fd watching an overlayfs inode, while the overlayfs is being unmounted, can lead to dereferencing NULL ptr. This issue was found by syzkaller. Race...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from exportfsencodefid not being called with sumount protection, which could lead to a null pointer dereference...