CVE-2025-71201

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

netfs: Fix early read unlock of page with EOF in middle

The read result collection for buffered reads seems to run ahead of the

completion of subrequests under some circumstances, as can be seen in the

following log snippet:

9p_client_res: client 18446612686390831168 response P9_TREAD tag 0 err 0

...

netfs_sreq: R=00001b55[1] DOWN TERM f=192 s=0 5fb2/5fb2 s=5 e=0

...

netfs_collect_folio: R=00001b55 ix=00004 r=4000-5000 t=4000/5fb2

netfs_folio: i=157f3 ix=00004-00004 read-done

netfs_folio: i=157f3 ix=00004-00004 read-unlock

netfs_collect_folio: R=00001b55 ix=00005 r=5000-5fb2 t=5000/5fb2

netfs_folio: i=157f3 ix=00005-00005 read-done

netfs_folio: i=157f3 ix=00005-00005 read-unlock

...

netfs_collect_stream: R=00001b55[0:] cto=5fb2 frn=ffffffff

netfs_collect_state: R=00001b55 col=5fb2 cln=6000 n=c

netfs_collect_stream: R=00001b55[0:] cto=5fb2 frn=ffffffff

net

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References