CVE-2025-68185
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing Theoretically it's an oopsable race, but I don't believe one can manage to hit it on real hardware; might become doable on a KVM, but it still won't be easy to attack. Anyway, it's easy to deal with - since xdr_encode_hyper() is just a call of put_unaligned_be64(), we can put that under ->d_lock and be done with that.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedDec 16, 2025
First seenDec 16, 2025
How to fix
Update
- Linux Linux6025f641a0e30afdc5aa62017397b1860ad9f677, e6cafe71eb3b5579b245ba1bd528a181e77f3df1, fa4daf7d11e45b72aad5d943a7ab991f869fff79, 504b3fb9948a9e96ebbabdee0d33966a8bab15cb, eacfd08b26a062f1095b18719715bc82ad35312e, 40be5b9080114f18b0cea386db415b68a7273c1a, f5e570eaab36a110c6ffda32b87c51170990c2d1, a890a2e339b929dbd843328f9a92a1625404fe63 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 6025f641a0e30afdc5aa62017397b1860ad9f677, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < e6cafe71eb3b5579b245ba1bd528a181e77f3df1, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < fa4daf7d11e45b72aad5d943a7ab991f869fff79, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 504b3fb9948a9e96ebbabdee0d33966a8bab15cb, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < eacfd08b26a062f1095b18719715bc82ad35312e, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 40be5b9080114f18b0cea386db415b68a7273c1a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < f5e570eaab36a110c6ffda32b87c51170990c2d1, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < a890a2e339b929dbd843328f9a92a1625404fe63, 2.6.12 | 6025f641a0e30afdc5aa62017397b1860ad9f677, e6cafe71eb3b5579b245ba1bd528a181e77f3df1, fa4daf7d11e45b72aad5d943a7ab991f869fff79, 504b3fb9948a9e96ebbabdee0d33966a8bab15cb, eacfd08b26a062f1095b18719715bc82ad35312e, 40be5b9080114f18b0cea386db415b68a7273c1a, f5e570eaab36a110c6ffda32b87c51170990c2d1, a890a2e339b929dbd843328f9a92a1625404fe63 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.