CVE-2025-38028

The vulnerability CVE-2025-38028 affects the Linux kernel’s NFS/localio path (nfs_local_open_fh) due to a race condition involved when dropping the cl_uuid.lock. After the lock is released, another CPU could reclaim the just-added nfsd_file, risking use-after-free scenarios. The described fix is ...