CVE-2025-39688

In the Linux kernel, the following vulnerability has been resolved: nfsd: allow SC_STATUS_FREEABLE when searching via nfs4_lookup_stateid() The pynfs DELEG8 test fails when run against nfsd. It acquires a delegation and then lets the lease time out. It then tries to use the deleg stateid and expects to see NFS4ERR_DELEG_REVOKED, but it gets bad NFS4ERR_BAD_STATEID instead. When a delegation is revoked, it's initially marked with SC_STATUS_REVOKED, or SC_STATUS_ADMIN_REVOKED and later, it's marked with the SC_STATUS_FREEABLE flag, which denotes that it is waiting for s FREE_STATEID call. nfs4_lookup_stateid() accepts a statusmask that includes the status flags that a found stateid is allowed to have. Currently, that mask never includes SC_STATUS_FREEABLE, which means that revoked delegations are (almost) never found. Add SC_STATUS_FREEABLE to the always-allowed status flags, and remove it from nfsd4_delegreturn() since it's now always implied.

• https://git.kernel.org/stable/c/52e209203c35a4fbff8af23cd3613efe5df40102Patch
• https://git.kernel.org/stable/c/5bcb44e650bc4ec7eac23df90c5e011a77fa2bebPatch
• https://git.kernel.org/stable/c/d1bc15b147d35b4cb7ca99a9a7d79d41ca342c13Patch
• https://git.kernel.org/stable/c/dc6f3295905d7185e71091870119a8c11c3808ccPatch

Published

Apr 18, 2025

Last Modified

Jul 30, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-39682In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2025-39683In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2025-39684In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-39685In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2025-39686In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-39687In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2025-39689In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-3969A vulnerability was found in codeprojects News Publishing Si…9.8
• CVE-2025-39690In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-39691In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-39692In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-39693In the Linux kernel, the following vulnerability has been re…5.5