AZL-73716
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-73716.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-73716
- Upstream
- Published
- 2025-09-05T18:15:46Z
- Modified
- 2026-04-01T05:22:20.066373Z
- Summary
- CVE-2025-39697 affecting package kernel for versions less than 5.15.200.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
NFS: Fix a race when updating an existing write
After nfslockandjoinrequests() tests for whether the request is still attached to the mapping, nothing prevents a call to nfsinoderemoverequest() from succeeding until we actually lock the page group. The reason is that whoever called nfsinoderemoverequest() doesn't necessarily have a lock on the page group head.
So in order to avoid races, let's take the page group lock earlier in nfslockandjoinrequests(), and hold it across the removal of the request in nfsinoderemove_request().
- References