In the Linux kernel, the following vulnerability has been resolved:
NFSv4/pNFS: Fix a race to wake on NFSLAYOUTDRAIN
We found a few different systems hung up in writeback waiting on the same page lock, and one task waiting on the NFSLAYOUTDRAIN bit in pnfsupdatelayout(), however the pnfslayouthdr's plh_outstanding count was zero.
It seems most likely that this is another race between the waiter and waker similar to commit ed0172af5d6f ("SUNRPC: Fix a race to wake a sync task"). Fix it up by applying the advised barrier.
[
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"58055677418615899087166675726809901381",
"251349712283302083257677454918560731107",
"27543768229993980459958628269266354449",
"164699399015347230184355947798703765436",
"200278966927434018900739127369977675756"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f4da20080718f258e189a2c5f515385fa393da6",
"target": {
"file": "fs/nfs/pnfs.c"
},
"id": "CVE-2025-38393-0b1bdce7"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 201.0,
"function_hash": "304954259175494060862767405115975622766"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f4da20080718f258e189a2c5f515385fa393da6",
"target": {
"file": "fs/nfs/pnfs.c",
"function": "nfs_layoutget_end"
},
"id": "CVE-2025-38393-1dd03cc5"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"58055677418615899087166675726809901381",
"251349712283302083257677454918560731107",
"27543768229993980459958628269266354449",
"164699399015347230184355947798703765436",
"200278966927434018900739127369977675756"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8846fd02c98da8b79e6343a20e6071be6f372180",
"target": {
"file": "fs/nfs/pnfs.c"
},
"id": "CVE-2025-38393-3a6ef508"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 201.0,
"function_hash": "304954259175494060862767405115975622766"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4b13885e7ef1e64e45268feef1e5f0707c47e72",
"target": {
"file": "fs/nfs/pnfs.c",
"function": "nfs_layoutget_end"
},
"id": "CVE-2025-38393-4f50335f"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"58055677418615899087166675726809901381",
"251349712283302083257677454918560731107",
"27543768229993980459958628269266354449",
"164699399015347230184355947798703765436",
"200278966927434018900739127369977675756"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c01776287414ca43412d1319d2877cbad65444ac",
"target": {
"file": "fs/nfs/pnfs.c"
},
"id": "CVE-2025-38393-5aff9f02"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"58055677418615899087166675726809901381",
"251349712283302083257677454918560731107",
"27543768229993980459958628269266354449",
"164699399015347230184355947798703765436",
"200278966927434018900739127369977675756"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@08287df60bac5b008b6bcdb03053988335d3d282",
"target": {
"file": "fs/nfs/pnfs.c"
},
"id": "CVE-2025-38393-c0de795a"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 201.0,
"function_hash": "304954259175494060862767405115975622766"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8846fd02c98da8b79e6343a20e6071be6f372180",
"target": {
"file": "fs/nfs/pnfs.c",
"function": "nfs_layoutget_end"
},
"id": "CVE-2025-38393-ca59af82"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"58055677418615899087166675726809901381",
"251349712283302083257677454918560731107",
"27543768229993980459958628269266354449",
"164699399015347230184355947798703765436",
"200278966927434018900739127369977675756"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@864a54c1243ed3ca60baa4bc492dede1361f4c83",
"target": {
"file": "fs/nfs/pnfs.c"
},
"id": "CVE-2025-38393-d82b5901"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"58055677418615899087166675726809901381",
"251349712283302083257677454918560731107",
"27543768229993980459958628269266354449",
"164699399015347230184355947798703765436",
"200278966927434018900739127369977675756"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ca65fa71024a1767a59ffbc6a6e2278af84735e",
"target": {
"file": "fs/nfs/pnfs.c"
},
"id": "CVE-2025-38393-da2e7628"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 201.0,
"function_hash": "304954259175494060862767405115975622766"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@864a54c1243ed3ca60baa4bc492dede1361f4c83",
"target": {
"file": "fs/nfs/pnfs.c",
"function": "nfs_layoutget_end"
},
"id": "CVE-2025-38393-e7f9374f"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 201.0,
"function_hash": "304954259175494060862767405115975622766"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@08287df60bac5b008b6bcdb03053988335d3d282",
"target": {
"file": "fs/nfs/pnfs.c",
"function": "nfs_layoutget_end"
},
"id": "CVE-2025-38393-efb5b085"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 201.0,
"function_hash": "304954259175494060862767405115975622766"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ca65fa71024a1767a59ffbc6a6e2278af84735e",
"target": {
"file": "fs/nfs/pnfs.c",
"function": "nfs_layoutget_end"
},
"id": "CVE-2025-38393-f44fd54a"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"58055677418615899087166675726809901381",
"251349712283302083257677454918560731107",
"27543768229993980459958628269266354449",
"164699399015347230184355947798703765436",
"200278966927434018900739127369977675756"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4b13885e7ef1e64e45268feef1e5f0707c47e72",
"target": {
"file": "fs/nfs/pnfs.c"
},
"id": "CVE-2025-38393-f8c7f13e"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 201.0,
"function_hash": "304954259175494060862767405115975622766"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c01776287414ca43412d1319d2877cbad65444ac",
"target": {
"file": "fs/nfs/pnfs.c",
"function": "nfs_layoutget_end"
},
"id": "CVE-2025-38393-fd982e94"
}
]