Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: nfsd: The flag SCSTATUSFREEABLE is now allowed when searching via nfs4lookupstateid. The pynfs DELEG8 test fails when run against nfsd. It acquires a delegation and then waits for the lease time out. It then attempts to use the...

DEBIAN-CVE-2025-39688

In the Linux kernel, the following vulnerability has been resolved: nfsd: allow SCSTATUSFREEABLE when searching via nfs4lookupstateid The pynfs DELEG8 test fails when run against nfsd. It acquires a delegation and then lets the lease time out. It then tries to use the deleg stateid and expects to...

CVE-2025-39688

CVE-2025-39688 affects the Linux kernel NFS server (nfsd): revoked delegations could be hidden due to nfs4_lookup_stateid() not allowing SC_STATUS_FREEABLE in its statusmask. The fix adds SC_STATUS_FREEABLE to the always-allowed flags in nfs4_lookup_stateid() and removes SC_STATUS_FREEABLE from n...