CVE-2025-68185
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing
In the Linux kernel, the following vulnerability has been resolved: nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing Theoretically it's an oopsable race, but I don't believe one can manage to hit it on real hardware; might become doable on a KVM, but it still won't be easy to attack. Anyway, it's easy to deal with - since xdr_encode_hyper() is just a call of put_unaligned_be64(), we can put that under ->d_lock and be done with that.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 | affected | git | 6025f641a0e30afdc5aa62017397b1860ad9f677 | Unavailable | None listed |
| 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 | affected | git | e6cafe71eb3b5579b245ba1bd528a181e77f3df1 | Unavailable | None listed |
| 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 | affected | git | fa4daf7d11e45b72aad5d943a7ab991f869fff79 | Unavailable | None listed |
| 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 | affected | git | 504b3fb9948a9e96ebbabdee0d33966a8bab15cb | Unavailable | None listed |
| 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 | affected | git | eacfd08b26a062f1095b18719715bc82ad35312e | Unavailable | None listed |
| 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 | affected | git | 40be5b9080114f18b0cea386db415b68a7273c1a | Unavailable | None listed |
| 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 | affected | git | f5e570eaab36a110c6ffda32b87c51170990c2d1 | Unavailable | None listed |
| 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 | affected | git | a890a2e339b929dbd843328f9a92a1625404fe63 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 2.6.12 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 2.6.12 | Unavailable | None listed |
| 5.4.302 | unaffected | semver | Unavailable | 5.4.* | None listed |
| 5.10.247 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.197 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.159 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.117 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.58 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.17.8 | unaffected | semver | Unavailable | 6.17.* | None listed |
| 6.18 | unaffected | original_commit_for_fix | Unavailable | * | None listed |