[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-71090":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-15T22:50:23.791Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":18,"aliases":19,"duplicate_of":9,"upstream":20,"downstream":21,"duplicates":34,"related":35,"reserved_at":9,"published_at":36,"modified_at":37,"state":38,"summary":39,"references_raw":48,"kevs":59,"epss":60,"epss_history":63,"metrics":336,"affected":342},"CVE-2025-71090","In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix nfsd_file reference leak in nfsd4_add_rdaccess_to_wrdeleg()\n\nnfsd4_add_rdaccess_to_wrdeleg() unconditionally overwrites\nfp->fi_fds[O_RDONLY] with a newly acquired nfsd_file. However, if\nthe client already has a SHARE_ACCESS_READ open from a previous OPEN\noperation, this action overwrites the existing pointer without\nreleasing its reference, orphaning the previous reference.\n\nAdditionally, the function originally stored the same nfsd_file\npointer in both fp->fi_fds[O_RDONLY] and fp->fi_rdeleg_file with\nonly a single reference. When put_deleg_file() runs, it clears\nfi_rdeleg_file and calls nfs4_file_put_access() to release the file.\n\nHowever, nfs4_file_put_access() only releases fi_fds[O_RDONLY] when\nthe fi_access[O_RDONLY] counter drops to zero. If another READ open\nexists on the file, the counter remains elevated and the nfsd_file\nreference from the delegation is never released. This potentially\ncauses open conflicts on that file.\n\nThen, on server shutdown, these leaks cause __nfsd_file_cache_purge()\nto encounter files with an elevated reference count that cannot be\ncleaned up, ultimately triggering a BUG() in kmem_cache_destroy()\nbecause there are still nfsd_file objects allocated in that cache.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":9,"likelihood_of_exploit":9,"capec":17},"NVD-CWE-OTHER","Other","NVD uses this CWE ID when the weakness does not map to any existing CWE entry.","placeholder","NVD-Reserved",[],[],[],[],[22,24,26,28,30,32],{"_key":23},"USN-8277-1",{"_key":25},"USN-8277-2",{"_key":27},"USN-8310-1",{"_key":29},"USN-8374-1",{"_key":31},"UBUNTU-CVE-2025-71090",{"_key":33},"DEBIAN-CVE-2025-71090",[],[],"2026-01-13T15:34:51.777Z","2026-05-11T21:54:33.111Z","Analyzed",{"cisa_kev":40,"cisa_ransomware":40,"cisa_vendor":9,"epss_severity":41,"epss_score":42,"severity":43,"severity_score":44,"severity_version":45,"severity_source":46,"severity_vector":47,"severity_status":38},false,"low",0.001,"medium",5.5,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",[49,55],{"url":50,"sources":51,"tags":53},"https://git.kernel.org/stable/c/c07dc84ed67c5a182273171639bacbbb87c12175",[52,46],"cve.org",[54],"Patch",{"url":56,"sources":57,"tags":58},"https://git.kernel.org/stable/c/8072e34e1387d03102b788677d491e2bcceef6f5",[52,46],[54],[],{"date":61,"score":42,"percentile":62},"2026-06-15",0.0107,[64,68,71,74,77,80,84,87,90,93,96,99,102,105,108,111,114,117,120,123,126,129,131,134,137,140,142,145,148,151,154,157,161,164,167,170,173,176,179,182,185,188,191,194,197,200,203,206,209,212,215,218,221,224,227,230,233,236,239,242,245,248,251,254,257,260,263,265,269,272,275,278,282,285,288,291,294,297,300,303,306,309,312,315,318,321,324,327,330,333],{"date":65,"score":66,"percentile":67},"2026-01-14",0.00018,0.04066,{"date":69,"score":66,"percentile":70},"2026-01-15",0.03992,{"date":72,"score":66,"percentile":73},"2026-01-16",0.03964,{"date":75,"score":66,"percentile":76},"2026-01-17",0.03965,{"date":78,"score":66,"percentile":79},"2026-01-18",0.0394,{"date":81,"score":82,"percentile":83},"2026-01-19",0.00024,0.05917,{"date":85,"score":82,"percentile":86},"2026-01-20",0.05875,{"date":88,"score":82,"percentile":89},"2026-01-21",0.05874,{"date":91,"score":82,"percentile":92},"2026-01-22",0.05856,{"date":94,"score":82,"percentile":95},"2026-01-23",0.05916,{"date":97,"score":82,"percentile":98},"2026-01-24",0.05962,{"date":100,"score":82,"percentile":101},"2026-01-25",0.0591,{"date":103,"score":82,"percentile":104},"2026-01-26",0.05894,{"date":106,"score":82,"percentile":107},"2026-01-27",0.05872,{"date":109,"score":82,"percentile":110},"2026-01-28",0.05853,{"date":112,"score":82,"percentile":113},"2026-01-29",0.05865,{"date":115,"score":82,"percentile":116},"2026-01-30",0.05863,{"date":118,"score":82,"percentile":119},"2026-01-31",0.05835,{"date":121,"score":82,"percentile":122},"2026-02-01",0.05891,{"date":124,"score":82,"percentile":125},"2026-02-02",0.05878,{"date":127,"score":82,"percentile":128},"2026-02-03",0.05886,{"date":130,"score":82,"percentile":101},"2026-02-04",{"date":132,"score":82,"percentile":133},"2026-02-05",0.05967,{"date":135,"score":82,"percentile":136},"2026-02-06",0.05995,{"date":138,"score":82,"percentile":139},"2026-02-07",0.06002,{"date":141,"score":82,"percentile":136},"2026-02-08",{"date":143,"score":82,"percentile":144},"2026-02-09",0.05966,{"date":146,"score":82,"percentile":147},"2026-02-10",0.0596,{"date":149,"score":82,"percentile":150},"2026-02-11",0.0601,{"date":152,"score":82,"percentile":153},"2026-02-12",0.06041,{"date":155,"score":82,"percentile":156},"2026-02-13",0.06052,{"date":158,"score":159,"percentile":160},"2026-02-14",0.00026,0.06799,{"date":162,"score":159,"percentile":163},"2026-02-15",0.06806,{"date":165,"score":159,"percentile":166},"2026-02-16",0.06792,{"date":168,"score":159,"percentile":169},"2026-02-17",0.06761,{"date":171,"score":159,"percentile":172},"2026-02-18",0.07114,{"date":174,"score":159,"percentile":175},"2026-02-19",0.0718,{"date":177,"score":159,"percentile":178},"2026-02-20",0.07168,{"date":180,"score":159,"percentile":181},"2026-02-21",0.07179,{"date":183,"score":159,"percentile":184},"2026-02-22",0.07165,{"date":186,"score":159,"percentile":187},"2026-02-23",0.07163,{"date":189,"score":159,"percentile":190},"2026-02-24",0.07151,{"date":192,"score":159,"percentile":193},"2026-02-25",0.07083,{"date":195,"score":159,"percentile":196},"2026-02-26",0.07029,{"date":198,"score":159,"percentile":199},"2026-02-27",0.07046,{"date":201,"score":159,"percentile":202},"2026-02-28",0.07055,{"date":204,"score":159,"percentile":205},"2026-03-01",0.07102,{"date":207,"score":159,"percentile":208},"2026-03-02",0.06998,{"date":210,"score":159,"percentile":211},"2026-03-03",0.07007,{"date":213,"score":159,"percentile":214},"2026-03-04",0.06946,{"date":216,"score":159,"percentile":217},"2026-03-05",0.0697,{"date":219,"score":159,"percentile":220},"2026-03-06",0.06956,{"date":222,"score":159,"percentile":223},"2026-03-07",0.0696,{"date":225,"score":159,"percentile":226},"2026-03-08",0.06921,{"date":228,"score":159,"percentile":229},"2026-03-09",0.06882,{"date":231,"score":159,"percentile":232},"2026-03-10",0.0688,{"date":234,"score":159,"percentile":235},"2026-03-11",0.06903,{"date":237,"score":159,"percentile":238},"2026-03-12",0.06931,{"date":240,"score":159,"percentile":241},"2026-03-13",0.06948,{"date":243,"score":159,"percentile":244},"2026-03-14",0.06899,{"date":246,"score":159,"percentile":247},"2026-03-15",0.06889,{"date":249,"score":159,"percentile":250},"2026-03-16",0.06867,{"date":252,"score":159,"percentile":253},"2026-03-17",0.06854,{"date":255,"score":159,"percentile":256},"2026-03-18",0.06852,{"date":258,"score":159,"percentile":259},"2026-03-19",0.06863,{"date":261,"score":159,"percentile":262},"2026-03-20",0.06881,{"date":264,"score":159,"percentile":205},"2026-03-21",{"date":266,"score":267,"percentile":268},"2026-03-22",0.00027,0.07612,{"date":270,"score":267,"percentile":271},"2026-03-23",0.07583,{"date":273,"score":267,"percentile":274},"2026-03-24",0.07573,{"date":276,"score":267,"percentile":277},"2026-03-25",0.0765,{"date":279,"score":280,"percentile":281},"2026-03-26",0.00019,0.05034,{"date":283,"score":280,"percentile":284},"2026-03-27",0.05035,{"date":286,"score":280,"percentile":287},"2026-03-28",0.05037,{"date":289,"score":280,"percentile":290},"2026-03-29",0.05033,{"date":292,"score":280,"percentile":293},"2026-03-30",0.05015,{"date":295,"score":280,"percentile":296},"2026-03-31",0.04983,{"date":298,"score":280,"percentile":299},"2026-04-01",0.05001,{"date":301,"score":280,"percentile":302},"2026-04-02",0.05051,{"date":304,"score":280,"percentile":305},"2026-04-03",0.05067,{"date":307,"score":280,"percentile":308},"2026-04-04",0.0508,{"date":310,"score":280,"percentile":311},"2026-04-05",0.05077,{"date":313,"score":280,"percentile":314},"2026-04-06",0.05086,{"date":316,"score":280,"percentile":317},"2026-04-07",0.05101,{"date":319,"score":280,"percentile":320},"2026-04-08",0.05134,{"date":322,"score":280,"percentile":323},"2026-04-09",0.0515,{"date":325,"score":280,"percentile":326},"2026-04-10",0.05145,{"date":328,"score":280,"percentile":329},"2026-04-11",0.05125,{"date":331,"score":280,"percentile":332},"2026-04-12",0.05108,{"date":334,"score":280,"percentile":335},"2026-04-13",0.05093,[337],{"source":46,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":338,"cvss_v4_0":9},{"baseScore":44,"baseSeverity":339,"vectorString":47,"impactScore":340,"exploitabilityScore":341},"MEDIUM",6,4.6,[343,360],{"ecosystem":9,"name":344,"vendor":345,"product":345,"cpe_part":346,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":347},"Linux","linux","a",[348,355,358],{"version":349,"is_range":350,"range_type":52,"version_start":351,"version_start_type":352,"version_end":353,"version_end_type":354,"fixed_in":9},">= e7a8ebc305f26cab608e59a916a4ae89d6656c5f, \u003C c07dc84ed67c5a182273171639bacbbb87c12175",true,"e7a8ebc305f26cab608e59a916a4ae89d6656c5f","including","c07dc84ed67c5a182273171639bacbbb87c12175","excluding",{"version":356,"is_range":350,"range_type":52,"version_start":351,"version_start_type":352,"version_end":357,"version_end_type":354,"fixed_in":9},">= e7a8ebc305f26cab608e59a916a4ae89d6656c5f, \u003C 8072e34e1387d03102b788677d491e2bcceef6f5","8072e34e1387d03102b788677d491e2bcceef6f5",{"version":359,"is_range":40,"range_type":52,"version_start":359,"version_start_type":352,"version_end":359,"version_end_type":352,"fixed_in":9},"6.17",{"ecosystem":9,"name":361,"vendor":345,"product":362,"cpe_part":363,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":364},"linux kernel","linux_kernel","o",[365,370,371,373,375,377,379,381,383,385],{"version":366,"is_range":350,"range_type":367,"version_start":368,"version_start_type":352,"version_end":369,"version_end_type":354,"fixed_in":9},"gte6.17.1_lt6.18.4","cpe","6.17.1","6.18.4",{"version":359,"is_range":40,"range_type":367,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":372,"is_range":40,"range_type":367,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.19:rc1",{"version":374,"is_range":40,"range_type":367,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.19:rc2",{"version":376,"is_range":40,"range_type":367,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.19:rc3",{"version":378,"is_range":40,"range_type":367,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.19:rc4",{"version":380,"is_range":40,"range_type":367,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.19:rc5",{"version":382,"is_range":40,"range_type":367,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.19:rc6",{"version":384,"is_range":40,"range_type":367,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.19:rc7",{"version":386,"is_range":40,"range_type":367,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.19:rc8"]