CVE-2025-68764
High
Description
In the Linux kernel, the following vulnerability has been resolved: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags When a filesystem is being automounted, it needs to preserve the user-set superblock mount options, such as the "ro" flag.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux
PublishedJan 5, 2026
First seenJan 5, 2026
Weakness typeCWE-862Missing authorization
How to fix
Update
- Linux Linuxa3dc6c40bcab1a888d5c0d134ccc0746b4c98929, ba1495aefd22fcf0746a2a3025c95d766d7cde4d, c09070b4def1b34e473a746c6a5331ccb80902c1, dce10c59211e5cd763a62ea01e79b82a629811e3, 612cc98698d667df804792f0c47d4e501e66da29, 4b296944e632cf4c6a4cc8e2585c6451eae47b1b, df9b003a2ecacc7218486fbb31fe008c93097d5f, 8675c69816e4276b979ff475ee5fac4688f80125 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | f2aedb713c284429987dc66c7aaf38decfc8da2a ≤ v < a3dc6c40bcab1a888d5c0d134ccc0746b4c98929, f2aedb713c284429987dc66c7aaf38decfc8da2a ≤ v < ba1495aefd22fcf0746a2a3025c95d766d7cde4d, f2aedb713c284429987dc66c7aaf38decfc8da2a ≤ v < c09070b4def1b34e473a746c6a5331ccb80902c1, f2aedb713c284429987dc66c7aaf38decfc8da2a ≤ v < dce10c59211e5cd763a62ea01e79b82a629811e3, f2aedb713c284429987dc66c7aaf38decfc8da2a ≤ v < 612cc98698d667df804792f0c47d4e501e66da29, f2aedb713c284429987dc66c7aaf38decfc8da2a ≤ v < 4b296944e632cf4c6a4cc8e2585c6451eae47b1b, f2aedb713c284429987dc66c7aaf38decfc8da2a ≤ v < df9b003a2ecacc7218486fbb31fe008c93097d5f, f2aedb713c284429987dc66c7aaf38decfc8da2a ≤ v < 8675c69816e4276b979ff475ee5fac4688f80125, 5.6 | a3dc6c40bcab1a888d5c0d134ccc0746b4c98929, ba1495aefd22fcf0746a2a3025c95d766d7cde4d, c09070b4def1b34e473a746c6a5331ccb80902c1, dce10c59211e5cd763a62ea01e79b82a629811e3, 612cc98698d667df804792f0c47d4e501e66da29, 4b296944e632cf4c6a4cc8e2585c6451eae47b1b, df9b003a2ecacc7218486fbb31fe008c93097d5f, 8675c69816e4276b979ff475ee5fac4688f80125 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.