CVE-2025-68349
High
Description
In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid Fixes a crash when layout is null during this call stack: write_inode -> nfs4_write_inode -> pnfs_layoutcommit_inode pnfs_set_layoutcommit relies on the lseg refcount to keep the layout around. Need to clear NFS_INO_LAYOUTCOMMIT otherwise we might attempt to reference a null layout.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Linux
PublishedDec 24, 2025
First seenDec 24, 2025
How to fix
Update
- Linux Linux084bebe82ad86f718a3af84f34761863e63164ed, b6e4e3a08c03200cc4b8067ec8ab3172a989d6fc, 104080582ae0aa6dce6c6d75ff89062efe84673b, f718f9ea6094843b8c059b073af49ad61e9f49bb, 59947dff0fb7c19c09ce6dccbcd253fd542b6c25, ca2e7fdad7c683b64821c94a58b9b68733214dad, 38694f9aae00459ab443a7dc8b3949a6b33b560a, e0f8058f2cb56de0b7572f51cd563ca5debce746 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | fe1cf9469d7bcb6af27e42eb555a41b0135bce4a ≤ v < 084bebe82ad86f718a3af84f34761863e63164ed, fe1cf9469d7bcb6af27e42eb555a41b0135bce4a ≤ v < b6e4e3a08c03200cc4b8067ec8ab3172a989d6fc, fe1cf9469d7bcb6af27e42eb555a41b0135bce4a ≤ v < 104080582ae0aa6dce6c6d75ff89062efe84673b, fe1cf9469d7bcb6af27e42eb555a41b0135bce4a ≤ v < f718f9ea6094843b8c059b073af49ad61e9f49bb, fe1cf9469d7bcb6af27e42eb555a41b0135bce4a ≤ v < 59947dff0fb7c19c09ce6dccbcd253fd542b6c25, fe1cf9469d7bcb6af27e42eb555a41b0135bce4a ≤ v < ca2e7fdad7c683b64821c94a58b9b68733214dad, fe1cf9469d7bcb6af27e42eb555a41b0135bce4a ≤ v < 38694f9aae00459ab443a7dc8b3949a6b33b560a, fe1cf9469d7bcb6af27e42eb555a41b0135bce4a ≤ v < e0f8058f2cb56de0b7572f51cd563ca5debce746, 4.10 | 084bebe82ad86f718a3af84f34761863e63164ed, b6e4e3a08c03200cc4b8067ec8ab3172a989d6fc, 104080582ae0aa6dce6c6d75ff89062efe84673b, f718f9ea6094843b8c059b073af49ad61e9f49bb, 59947dff0fb7c19c09ce6dccbcd253fd542b6c25, ca2e7fdad7c683b64821c94a58b9b68733214dad, 38694f9aae00459ab443a7dc8b3949a6b33b560a, e0f8058f2cb56de0b7572f51cd563ca5debce746 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.