Riskcovery

CVE-2025-68243

NFS: Check the TLS certificate fields in nfs_match_client()

State
Published
Severity
7.0 High
Published
Dec 16, 2025
Updated
Aug 5, 2026
Reserved
Dec 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

NFS: Check the TLS certificate fields in nfs_match_client()

If the TLS security policy is of type RPC_XPRTSEC_TLS_X509, then the cert_serial and privkey_serial fields need to match as well since they define the client's identity, as presented to the server.

Scores

CVSSScoreVectorSource
3.17.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 90c9550a8d65fb9b1bf87baf97a04ed91bf61b33 to before b8fa37219074811c04d4ecb742c73e2b296da6a8Affected
  • 90c9550a8d65fb9b1bf87baf97a04ed91bf61b33 to before fb2cba0854a7f315c8100a807a6959b99d72479eAffected
LinuxLinux
  • 6.17Affected
  • before 6.17Not affected
  • 6.17.9 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.