Search: CVE-2025-40212

A high-severity vulnerability in the Linux kernel's NFS server daemon (nfsd) was fixed to address a reference count leak in the nfsd_set_fh_dentry() function. This flaw could lead to use-after-free conditions and potential denial of service if a client synthesizes an incorrect filehandle, specifically when a NFSv3 or v2 client uses a filehandle from the NFSv4 pseudo root filesystem. The issue arises because the export is stored despite an error, causing an extra reference drop later. The fix delays assignments until after error checks to prevent this.