cve 2025 40324

CVE-2025-40324 is a Linux kernel vulnerability affecting the NFS server (nfsd) that can cause a system crash when a specific tracepoint is triggered. The flaw resides in the nfsd4_read_release function, where the trace_nfsd_read_done tracepoint faults during a pynfs read.testNoFh unit test if kernel tracing is enabled. This turns a test scenario into an availability problem for real-world NFS servers. The patch addresses the crash by fixing the tracepoint handling. While the vulnerability is in the Linux kernel, it is relevant to Windows users running NFS services on mixed networks or virtualized environments. The tag covers the CVE details, affected component, and the patch guide for mitigation.