First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-39730

HighCVSS 7.8/10Last modified Oct 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()

The function needs to check the minimal filehandle length before it can access the embedded filehandle.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
Linux	Linux	>= 20fa19027286983ab2734b5910c4a687436e0c31, < 7f8eca87fef7519e9c41f3258f25ebc2752247ee; >= 20fa19027286983ab2734b5910c4a687436e0c31, < cb09afa0948d96b1e385d609ed044bb1aa043536; >= 20fa19027286983ab2734b5910c4a687436e0c31, < 3570ef5c31314c13274c935a20b91768ab5bf412; >= 20fa19027286983ab2734b5910c4a687436e0c31, < 763810bb883cb4de412a72f338d80947d97df67b; >= 20fa19027286983ab2734b5910c4a687436e0c31, < 12ad3def2e5e0b120e3d0cb6ce8b7b796819ad40; >= 20fa19027286983ab2734b5910c4a687436e0c31, < 2ad40b7992aa26bc631afc1a995b0e3ddc30de3f; >= 20fa19027286983ab2734b5910c4a687436e0c31, < b7f7866932466332a2528fda099000b035303485; >= 20fa19027286983ab2734b5910c4a687436e0c31, < 7dd36f7477d1e03a1fcf8d13531ca326c4fb599f; >= 20fa19027286983ab2734b5910c4a687436e0c31, < ef93a685e01a281b5e2a25ce4e3428cf9371a205
Linux	Linux	4.13

References

Timeline

Published: Sep 7, 2025
Last modified: Oct 19, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-397315.5In the Linux kernel, the following vulnerability has been resolved: f2fs: vm_unmap_ram() may be called from an invalid context When testin CVE-2025-397325.5In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask(CVE-2025-397335.5In the Linux kernel, the following vulnerability has been resolved: team: replace team lock with rtnl lock syszbot reports various orderin CVE-2025-397345.5In the Linux kernel, the following vulnerability has been resolved: Revert "fs/ntfs3: Replace inode_trylock with inode_lock" This reverts CVE-2025-397357.1In the Linux kernel, the following vulnerability has been resolved: jfs: fix slab-out-of-bounds read in ea_get() During the "size_check" l CVE-2025-397365.5In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock CVE-2025-397375.5In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() A soft locku CVE-2025-397387.8In the Linux kernel, the following vulnerability has been resolved: btrfs: do not allow relocation of partially dropped subvolumes [BUG] T CVE-2025-397395.5In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-qcom: Add SM6115 MDSS compatible Add the SM6115 MDSS co CVE-2025-39749.8A vulnerability has been found in PHPGurukul COVID19 Testing Management System 1.0 and classified as critical. This vulnerability affects un CVE-2025-397407.8In the Linux kernel, the following vulnerability has been resolved: drm/xe/migrate: prevent potential UAF If we hit the error path, the pr CVE-2025-397415.5In the Linux kernel, the following vulnerability has been resolved: drm/xe/migrate: don't overflow max copy size With non-page aligned cop