CVE Explorer

CVE-2025-68185

In the Linux kernel, the following vulnerability has been resolved: nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing Theoretically it's an oopsable race, but I don't believe one can manage to hit it on real hardware; might become doable on a KVM, but it still won't be easy to attack. Anyway, it's easy to deal with - since xdr_encode_hyper() is just a call of put_unaligned_be64(), we can put that under ->d_lock and be done with that.

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:14f05b133147c904add97c82c3da475e9d58aadaaf31227c7785ae9975d54134

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/nfs/nfs4proc.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"6025f641a0e30afdc5aa62017397b1860ad9f677","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"},{"lessThan":"e6cafe71eb3b5579b245ba1bd528a181e77f3df1","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"},{"lessThan":"fa4daf7d11e45b72aad5d943a7ab991f869fff79","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c32eb93daa759ceea46c0a2e2f880736090fca7f9a32d69755ce3a72ee3f6854 · sha256:29e6fe2ee7804456… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/nfs/nfs4proc.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.12"},{"lessThan":"2.6.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.4.*","status":"unaffected","version":"5.4.302","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.247","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.197","versionType":"semver"},{"lessTha…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c32eb93daa759ceea46c0a2e2f880736090fca7f9a32d69755ce3a72ee3f6854 · sha256:29e6fe2ee7804456… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c32eb93daa759ceea46c0a2e2f880736090fca7f9a32d69755ce3a72ee3f6854 · sha256:29e6fe2ee7804456… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c32eb93daa759ceea46c0a2e2f880736090fca7f9a32d69755ce3a72ee3f6854 · sha256:29e6fe2ee7804456… · /containers/cna/affected/1

Source references

8 source assertions

{"url":"https://git.kernel.org/stable/c/40be5b9080114f18b0cea386db415b68a7273c1a"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c32eb93daa759ceea46c0a2e2f880736090fca7f9a32d69755ce3a72ee3f6854 · sha256:29e6fe2ee7804456… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/504b3fb9948a9e96ebbabdee0d33966a8bab15cb"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c32eb93daa759ceea46c0a2e2f880736090fca7f9a32d69755ce3a72ee3f6854 · sha256:29e6fe2ee7804456… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/6025f641a0e30afdc5aa62017397b1860ad9f677"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c32eb93daa759ceea46c0a2e2f880736090fca7f9a32d69755ce3a72ee3f6854 · sha256:29e6fe2ee7804456… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/a890a2e339b929dbd843328f9a92a1625404fe63"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c32eb93daa759ceea46c0a2e2f880736090fca7f9a32d69755ce3a72ee3f6854 · sha256:29e6fe2ee7804456… · /containers/cna/references/7

{"url":"https://git.kernel.org/stable/c/e6cafe71eb3b5579b245ba1bd528a181e77f3df1"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c32eb93daa759ceea46c0a2e2f880736090fca7f9a32d69755ce3a72ee3f6854 · sha256:29e6fe2ee7804456… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/eacfd08b26a062f1095b18719715bc82ad35312e"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c32eb93daa759ceea46c0a2e2f880736090fca7f9a32d69755ce3a72ee3f6854 · sha256:29e6fe2ee7804456… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/f5e570eaab36a110c6ffda32b87c51170990c2d1"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c32eb93daa759ceea46c0a2e2f880736090fca7f9a32d69755ce3a72ee3f6854 · sha256:29e6fe2ee7804456… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/fa4daf7d11e45b72aad5d943a7ab991f869fff79"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c32eb93daa759ceea46c0a2e2f880736090fca7f9a32d69755ce3a72ee3f6854 · sha256:29e6fe2ee7804456… · /containers/cna/references/2

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer