CVE-2025-39912

In the Linux kernel, the following vulnerability has been resolved:

nfs/localio: restore creds before releasing pageio data

Otherwise if the nfsd filecache code releases the nfsd_file immediately, it can trigger the BUG_ON(cred == current->cred) in __put_cred() when it puts the nfsd_file->nf_file->f-cred.

A race in the NFS local I/O path caused credentials to be restored after pageio release, potentially triggering a BUG_ON() in __put_cred(). The issue could lead to a local kernel crash (DoS) during NFS read/write operations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.