CVE-2025-68243
High
Description
In the Linux kernel, the following vulnerability has been resolved: NFS: Check the TLS certificate fields in nfs_match_client() If the TLS security policy is of type RPC_XPRTSEC_TLS_X509, then the cert_serial and privkey_serial fields need to match as well since they define the client's identity, as presented to the server.
SeverityHigh
CVSS7.0
Exploit probability—
Product
Linux
PublishedDec 16, 2025
First seenDec 16, 2025
How to fix
Update
- Linux Linuxb8fa37219074811c04d4ecb742c73e2b296da6a8, fb2cba0854a7f315c8100a807a6959b99d72479e or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 90c9550a8d65fb9b1bf87baf97a04ed91bf61b33 ≤ v < b8fa37219074811c04d4ecb742c73e2b296da6a8, 90c9550a8d65fb9b1bf87baf97a04ed91bf61b33 ≤ v < fb2cba0854a7f315c8100a807a6959b99d72479e, 6.17 | b8fa37219074811c04d4ecb742c73e2b296da6a8, fb2cba0854a7f315c8100a807a6959b99d72479e |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.