CVE-2025-68185

nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing

State: Published
Severity: Not scored
Published: Dec 16, 2025
Updated: Jun 16, 2026
Reserved: Dec 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing

Theoretically it's an oopsable race, but I don't believe one can manage to hit it on real hardware; might become doable on a KVM, but it still won't be easy to attack.

Anyway, it's easy to deal with - since xdr_encode_hyper() is just a call of put_unaligned_be64(), we can put that under ->d_lock and be done with that.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6025f641a0e30afdc5aa62017397b1860ad9f677Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e6cafe71eb3b5579b245ba1bd528a181e77f3df1Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before fa4daf7d11e45b72aad5d943a7ab991f869fff79Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 504b3fb9948a9e96ebbabdee0d33966a8bab15cbAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before eacfd08b26a062f1095b18719715bc82ad35312eAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 40be5b9080114f18b0cea386db415b68a7273c1aAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f5e570eaab36a110c6ffda32b87c51170990c2d1Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a890a2e339b929dbd843328f9a92a1625404fe63Affected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 5.4.302 through 5.4.Not affected 5.10.247 through 5.10.Not affected 5.15.197 through 5.15.Not affected 6.1.159 through 6.1.Not affected 6.6.117 through 6.6.Not affected 6.12.58 through 6.12.Not affected 6.17.8 through 6.17.*Not affected 6.18 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6025f641a0e30afdc5aa62017397b1860ad9f677Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e6cafe71eb3b5579b245ba1bd528a181e77f3df1Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before fa4daf7d11e45b72aad5d943a7ab991f869fff79Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 504b3fb9948a9e96ebbabdee0d33966a8bab15cbAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before eacfd08b26a062f1095b18719715bc82ad35312eAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 40be5b9080114f18b0cea386db415b68a7273c1aAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f5e570eaab36a110c6ffda32b87c51170990c2d1Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a890a2e339b929dbd843328f9a92a1625404fe63Affected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
5.4.302 through 5.4.*Not affected
5.10.247 through 5.10.*Not affected
5.15.197 through 5.15.*Not affected
6.1.159 through 6.1.*Not affected
6.6.117 through 6.6.*Not affected
6.12.58 through 6.12.*Not affected
6.17.8 through 6.17.*Not affected
6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.