CVE-2025-38231 | Linux Kernel up to 6.15.3 nfsd nfs4_state_start_net null pointer dereference

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.15.3. Affected by this issue is the function nfs4_state_start_net of the component nfsd. The manipulation leads to null pointer dereference.

This vulnerability is handled as CVE-2025-38231. The attack can only be done within the local network. There is no exploit available.

It is recommended to upgrade the affected component.