CVE-2025-40210 — Allocation of Resources Without Limits or Throttling in Linux

CWE-770 — Allocation of Resources Without Limits or Throttling16 documents7 sources
Severity
7.5HIGH
No vector
EPSS
0.0%
top 94.06%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
LinuxLinux KernelDebian Linux+1 more
Timeline
PublishedNov 21
Latest updateFeb 24

Description

In the Linux kernel, the following vulnerability has been resolved: Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND" I've found that pynfs COMP6 now leaves the connection or lease in a strange state, which causes CLOSE9 to hang indefinitely. I've dug into it a little, but I haven't been able to root-cause it yet. However, I bisected to commit 48aab1606fa8 ("NFSD: Remove the cap on number of operations per NFSv4 COMPOUND"). Tianshuo Han also reports a potential vulnerab…

Affected Packages6 packages

▶Linuxlinux/linux_kernel6.17.0 — 6.17.8
▶Debianlinux/linux_kernel< 6.17.8-1
▶Ubuntulinux/linux_kernel< 6.17.0-14.14
▶CVEListV5linux/linux48aab1606fa80027143a445224f552b4eeea845b — b3ee7ce432289deac87b9d14e01f2fe6958f7f0b+2

🔴Vulnerability Details

8
OSV
linux-azure vulnerabilities↗2026-02-24
▶
OSV
linux-oem-6.17 vulnerabilities↗2026-02-17
▶
OSV
linux-aws, linux-oracle vulnerabilities↗2026-02-17
▶
OSV
linux-gcp vulnerabilities↗2026-02-12
▶
OSV
linux, linux-raspi, linux-realtime vulnerabilities↗2026-02-12
▶

📋Vendor Advisories

7
Ubuntu
Linux kernel (Azure) vulnerabilities↗2026-02-24
▶
Ubuntu
Linux kernel (OEM) vulnerabilities↗2026-02-17
▶
Ubuntu
Linux kernel (GCP) vulnerabilities↗2026-02-12
▶
Ubuntu
Linux kernel vulnerabilities↗2026-02-12
▶
Red Hat
kernel: Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND"↗2025-11-21
▶