Get real-time updates on Telegram
CVE-2025-40087: Linux 4.8
CVE-2025-40087. CVSS 3.1 base score 7.5 (HIGH, Source advisory). EPSS 0.00499 (percentile 0.41513), scored 19-Oct-2026.
Affected technology
Linux · 9b9960a0ca4773e21c4b153ed355583946346b25 to before a75994dd879401c3e24ff51c2536559f1a53ea27, 9b9960a0ca4773e21c4b153ed355583946346b25 to before 34d187e020cbda112a6c6f094f0ca5e6a8672b75, 9b9960a0ca4773e21c4b153ed355583946346b25 to before ba88a53d7f5df4191583abf214214efe0cda91d2, 9b9960a0ca4773e21c4b153ed355583946346b25 to before da9129ef77786839a3ccd1d7afeeab790bceaa1d, 9b9960a0ca4773e21c4b153ed355583946346b25 to before f7353208c91ab004e0179c5fb6c365b0f132f9f0, 9b9960a0ca4773e21c4b153ed355583946346b25 to before a156af6a4dc38c2aa7c98e89520a70fb3b3e7df4, 9b9960a0ca4773e21c4b153ed355583946346b25 to before 785ec512afa80d0540f2ca797c0e56de747a6083, 9b9960a0ca4773e21c4b153ed355583946346b25 to before 4b47a8601b71ad98833b447d465592d847b4dc77
Linux
Linux · 4.8
Linux
Component: Not specified by the source
File: fs/nfsd/flexfilelayout.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 30.1 /100 (P4)
- CVSS 3.1
- 7.5 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · Source advisory
- EPSS
- 0.00499 · percentile 0.41513 · 2026-10-19
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-20 01:44:01.123206+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-40087.html