CVE-2025-39798

In the Linux kernel, the following vulnerability has been resolved:

NFS: Fix the setting of capabilities when automounting a new filesystem

Capabilities cannot be inherited when we cross into a new filesystem. They need to be reset to the minimal defaults, and then probed for again.

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation requires traversing filesystem boundaries within an active NFS mount, restricting exposure to environments using NFS submounts or server junctions. Improper inheritance of filesystem capabilities when crossing into a newly mounted export can cause the kernel client to misinterpret server feature support, potentially leading to denial of service or unexpected access control evaluations. Because triggering this condition depends on specific multi-filesystem NFS configurations and does not permit direct remote code execution, risk to typical deployments is limited.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.