CVE-2025-40324

In the Linux kernel, the following vulnerability has been resolved:

NFSD: Fix crash in nfsd4_read_release()

When tracing is enabled, the trace_nfsd_read_done trace point crashes during the pynfs read.testNoFh test.

This vulnerability is rated as Moderate severity because, although it can result in a system crash via remote network requests, successful exploitation requires non-default kernel event tracing to be enabled on the host. The flaw exclusively affects systems running as NFS servers where tracing on NFSD read tracepoints has been explicitly activated. Under standard Red Hat Enterprise Linux deployments, dynamic kernel tracing is disabled by default, preventing exploitation under typical operational conditions.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.