CVE detail
CVE-2025-39697
In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a race when updating an existing write After nfs_lock_and_join_requests() tests for whether the request is still attached to the mapping, nothing prevents a call to nfs_inode_remove_request() from succeeding until we actually lock the page group. The reason is that whoever called nfs_inode_remove_request() doesn't necessarily have a lock on the page group head. So in order to avoid races, let's take the page group lock earlier in nfs_lock_and_join_requests(), and hold it across the removal of the request in nfs_inode_remove_request().
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 24.9 · diversity 11.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
11 source links · newest first
- https://cert-portal.siemens.com/productcert/html/ssa-082556.htmlcert-portal.siemens.com
No excerpt available.
Vendor Advisorycert-portal.siemens.comSep 5, 2025, 6:15 PM - https://cert-portal.siemens.com/productcert/html/ssa-032379.htmlcert-portal.siemens.com
No excerpt available.
Vendor Advisorycert-portal.siemens.comSep 5, 2025, 6:15 PM No excerpt available.
Vendor Advisorylists.debian.orgSep 5, 2025, 6:15 PMNo excerpt available.
Vendor Advisorylists.debian.orgSep 5, 2025, 6:15 PMNo excerpt available.
Exploitgit.kernel.orgSep 5, 2025, 6:15 PMNo excerpt available.
Exploitgit.kernel.orgSep 5, 2025, 6:15 PMNo excerpt available.
Exploitgit.kernel.orgSep 5, 2025, 6:15 PMNo excerpt available.
Exploitgit.kernel.orgSep 5, 2025, 6:15 PMNo excerpt available.
Exploitgit.kernel.orgSep 5, 2025, 6:15 PMNo excerpt available.
Exploitgit.kernel.orgSep 5, 2025, 6:15 PMNo excerpt available.
Exploitgit.kernel.orgSep 5, 2025, 6:15 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2025-39825CVSS 7.8 · High
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix race with concurrent opens in rename(2) Besides sending the rename request to the server, th…
- CVE-2025-39813CVSS 4.7 · Medium
In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump When calling ftrace_dump_one() concurren…
- CVE-2025-39759CVSS 7.0 · High
In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix race between quota disable and quota rescan ioctl There's a race between a task disabling…
- CVE-2025-39673CVSS 9.8 · Critical
In the Linux kernel, the following vulnerability has been resolved: ppp: fix race conditions in ppp_fill_forward_path ppp_fill_forward_path() has two race conditions: 1. The pp…
- CVE-2025-38687CVSS 7.3 · High
In the Linux kernel, the following vulnerability has been resolved: comedi: fix race between polling and detaching syzbot reports a use-after-free in comedi in the below link, w…
- CVE-2025-38681CVSS 4.7 · Medium
In the Linux kernel, the following vulnerability has been resolved: mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() Memory hot remove unmaps and tears down vari…