CVE-2025-38411

netfs: Fix double put of request

HIGH
7.8
CVSS Score
Published: July 25, 2025 at 01:20 PM UTC
Updated: July 30, 2026 at 06:42 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.8
Exploit prediction
EPSS 0.4%

Description

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix double put of request If a netfs request finishes during the pause loop, it will have the ref that belongs to the IN_PROGRESS flag removed at that point - however, if it then goes to the final wait loop, that will *also* put the ref because it sees that the IN_PROGRESS flag is clear and incorrectly assumes that this happened when it called the collector. In fact, since IN_PROGRESS is clear, we shouldn't call the collector again since it's done all the cleanup, such as calling ->ki_complete(). Fix this by making netfs_collect_in_app() just return, indicating that we're done if IN_PROGRESS is removed.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

6.15.3 ≤ v < 6.15.62b1424cd131cfaba4cf7040473133d26cddac088329ba1cb402ac328224965b8fc7a554a5150908e6.15.36.16 rc16.16 rc26.16 rc36.16 rc4
Vendor states this is fixed in 9df7b5ebead649b00bf9a53a798e4bf83a1318fd (fixed)
Vendor states this is fixed in d18facba5a5795ad44b2a00a052e3db2fa77ab12 (fixed)
Affected range stops below 6.15.6, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

References (2)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/9df7b5ebead649b00bf9a53a798e4bf83a1318fd
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/d18facba5a5795ad44b2a00a052e3db2fa77ab12

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-415

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card