CVE-2025-68185

Linux Kernel - Use-After-Free in NFS4 Readdir Setup

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing Theoretically it's an oopsable race, but I don't believe one can manage to hit it on real hardware; might become doable on a KVM, but it still won't be easy to attack. Anyway, it's easy to deal with - since xdr_encode_hyper() is just a call of put_unaligned_be64(), we can put that under ->d_lock and be done with that.

Scores

EPSS 0.0006
EPSS Percentile 18.3%

Details

Status published
Products (25)
linux/Kernel 2.6.12 - 5.4.302linux
linux/Kernel 5.11.0 - 5.15.197linux
linux/Kernel 5.16.0 - 6.1.159linux
linux/Kernel 5.5.0 - 5.10.247linux
linux/Kernel 6.13.0 - 6.17.8linux
linux/Kernel 6.2.0 - 6.6.117linux
linux/Kernel 6.7.0 - 6.12.58linux
Linux/Linux < 2.6.12
Linux/Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 40be5b9080114f18b0cea386db415b68a7273c1a
Linux/Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 504b3fb9948a9e96ebbabdee0d33966a8bab15cb
... and 15 more
Published Dec 16, 2025
Tracked Since Feb 18, 2026