Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-68349

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid Fixes a crash when layout is null during this call stack: write_inode -> nfs4_write_inode -> pnfs_layoutcommit_inode pnfs_set_layoutcommit relies on the lseg refcount to keep the layout around. Need to clear NFS_INO_LAYOUTCOMMIT otherwise we might attempt to reference a null layout.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:a895f0a6ec82073252a82c62815be0de3d987bc74eba10a2f85787269e5c1a4c
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 7 assertions

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9d65bac559f61d1a63fe03596d25b732987ca97ae0be6da4c28a9eb194f71cf6 · sha256:15fa20ae45b653c8… · /containers/adp/1/affected/3

{"defaultStatus":"unknown","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9d65bac559f61d1a63fe03596d25b732987ca97ae0be6da4c28a9eb194f71cf6 · sha256:15fa20ae45b653c8… · /containers/adp/1/affected/4

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/nfs/pnfs.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.10"},{"lessThan":"4.10","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.248","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.198","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.160","versionType":"semver"},{"lessThanOrEqual…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9d65bac559f61d1a63fe03596d25b732987ca97ae0be6da4c28a9eb194f71cf6 · sha256:15fa20ae45b653c8… · /containers/cna/affected/1

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9d65bac559f61d1a63fe03596d25b732987ca97ae0be6da4c28a9eb194f71cf6 · sha256:15fa20ae45b653c8… · /containers/adp/1/affected/0

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/nfs/pnfs.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"084bebe82ad86f718a3af84f34761863e63164ed","status":"affected","version":"fe1cf9469d7bcb6af27e42eb555a41b0135bce4a","versionType":"git"},{"lessThan":"b6e4e3a08c03200cc4b8067ec8ab3172a989d6fc","status":"affected","version":"fe1cf9469d7bcb6af27e42eb555a41b0135bce4a","versionType":"git"},{"lessThan":"104080582ae0aa6dce6c6d75ff89062efe84673b","status":"affected","version":"fe1cf9469d7bcb6af27e42eb555a41b0…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9d65bac559f61d1a63fe03596d25b732987ca97ae0be6da4c28a9eb194f71cf6 · sha256:15fa20ae45b653c8… · /containers/cna/affected/0

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9d65bac559f61d1a63fe03596d25b732987ca97ae0be6da4c28a9eb194f71cf6 · sha256:15fa20ae45b653c8… · /containers/adp/1/affected/1

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9d65bac559f61d1a63fe03596d25b732987ca97ae0be6da4c28a9eb194f71cf6 · sha256:15fa20ae45b653c8… · /containers/adp/1/affected/2

Affected products and versions

7 source assertions
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9d65bac559f61d1a63fe03596d25b732987ca97ae0be6da4c28a9eb194f71cf6 · sha256:15fa20ae45b653c8… · /containers/adp/1/affected/3
{"defaultStatus":"unknown","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9d65bac559f61d1a63fe03596d25b732987ca97ae0be6da4c28a9eb194f71cf6 · sha256:15fa20ae45b653c8… · /containers/adp/1/affected/4
{"defaultStatus":"affected","product":"Linux","programFiles":["fs/nfs/pnfs.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.10"},{"lessThan":"4.10","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.248","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.198","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.160","versionType":"semver"},{"lessThanOrEqual…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9d65bac559f61d1a63fe03596d25b732987ca97ae0be6da4c28a9eb194f71cf6 · sha256:15fa20ae45b653c8… · /containers/cna/affected/1
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9d65bac559f61d1a63fe03596d25b732987ca97ae0be6da4c28a9eb194f71cf6 · sha256:15fa20ae45b653c8… · /containers/adp/1/affected/0
{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/nfs/pnfs.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"084bebe82ad86f718a3af84f34761863e63164ed","status":"affected","version":"fe1cf9469d7bcb6af27e42eb555a41b0135bce4a","versionType":"git"},{"lessThan":"b6e4e3a08c03200cc4b8067ec8ab3172a989d6fc","status":"affected","version":"fe1cf9469d7bcb6af27e42eb555a41b0135bce4a","versionType":"git"},{"lessThan":"104080582ae0aa6dce6c6d75ff89062efe84673b","status":"affected","version":"fe1cf9469d7bcb6af27e42eb555a41b0…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9d65bac559f61d1a63fe03596d25b732987ca97ae0be6da4c28a9eb194f71cf6 · sha256:15fa20ae45b653c8… · /containers/cna/affected/0
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9d65bac559f61d1a63fe03596d25b732987ca97ae0be6da4c28a9eb194f71cf6 · sha256:15fa20ae45b653c8… · /containers/adp/1/affected/1
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9d65bac559f61d1a63fe03596d25b732987ca97ae0be6da4c28a9eb194f71cf6 · sha256:15fa20ae45b653c8… · /containers/adp/1/affected/2

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:9d65bac559f61d1a63fe03596d25b732987ca97ae0be6da4c28a9eb194f71cf6 · sha256:15fa20ae45b653c8… · /containers/cna/metrics/0/cvssV3_1

Source references

9 source assertions
{"url":"https://cert-portal.siemens.com/productcert/html/ssa-019113.html"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9d65bac559f61d1a63fe03596d25b732987ca97ae0be6da4c28a9eb194f71cf6 · sha256:15fa20ae45b653c8… · /containers/adp/1/references/0
{"url":"https://git.kernel.org/stable/c/084bebe82ad86f718a3af84f34761863e63164ed"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9d65bac559f61d1a63fe03596d25b732987ca97ae0be6da4c28a9eb194f71cf6 · sha256:15fa20ae45b653c8… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/104080582ae0aa6dce6c6d75ff89062efe84673b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9d65bac559f61d1a63fe03596d25b732987ca97ae0be6da4c28a9eb194f71cf6 · sha256:15fa20ae45b653c8… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/38694f9aae00459ab443a7dc8b3949a6b33b560a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9d65bac559f61d1a63fe03596d25b732987ca97ae0be6da4c28a9eb194f71cf6 · sha256:15fa20ae45b653c8… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/59947dff0fb7c19c09ce6dccbcd253fd542b6c25"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9d65bac559f61d1a63fe03596d25b732987ca97ae0be6da4c28a9eb194f71cf6 · sha256:15fa20ae45b653c8… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/b6e4e3a08c03200cc4b8067ec8ab3172a989d6fc"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9d65bac559f61d1a63fe03596d25b732987ca97ae0be6da4c28a9eb194f71cf6 · sha256:15fa20ae45b653c8… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/ca2e7fdad7c683b64821c94a58b9b68733214dad"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9d65bac559f61d1a63fe03596d25b732987ca97ae0be6da4c28a9eb194f71cf6 · sha256:15fa20ae45b653c8… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/e0f8058f2cb56de0b7572f51cd563ca5debce746"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9d65bac559f61d1a63fe03596d25b732987ca97ae0be6da4c28a9eb194f71cf6 · sha256:15fa20ae45b653c8… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/f718f9ea6094843b8c059b073af49ad61e9f49bb"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9d65bac559f61d1a63fe03596d25b732987ca97ae0be6da4c28a9eb194f71cf6 · sha256:15fa20ae45b653c8… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer