The Linux kernel contained a vulnerability (CVE-2025-40087) in the NFSD component where the proc_layoutcommit was not defined for the FlexFiles layout type. This omission could lead to a crash when a pNFS client issues a LAYOUTCOMMIT operation on a FlexFiles layout. The vulnerability affects system availability (denial of service) without impacting confidentiality or integrity. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and unchanged scope, resulting in a high severity rating. No explicit patch or affected version information is provided in the source data.

Successful exploitation of this vulnerability can cause a denial of service by crashing the Linux kernel's NFSD component when handling specific pNFS client operations. There is no impact on confidentiality or integrity. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since this is a kernel vulnerability, monitor official Linux kernel security advisories for updates and apply any released patches promptly. Avoid exposure to untrusted pNFS clients until a fix is applied.