Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: nfsd: nfsd4spomustallow must check whether this is a v4 compound request. If the request being processed is not a v4 compound request, then examining the cstate can have undefined results. This patch adds a check to ensure that t...

The vulnerability of the nfsd4_spo_must_allow() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the nfsd4spomustallow function in the Linux operating system is related to state management errors. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2025-38430: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfsd: nfsd4spomustallow must check this is a v4 compound request If the request being processed is not a v4 compound request, then examining the cstate can have undefined results. This patch adds a check that the rpc procedure...