CVE-2025-68242

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix LTP test failures when timestamps are delegated The utimes01 and utime06 tests fail when delegated timestamps are enabled, specifically in subtests that modify the atime and mtime fields using the 'nobody' user ID. The problem can be reproduced as follow: # echo "/media *(rw,no_root_squash,sync)" >> /etc/exports # export -ra # mount -o rw,nfsvers=4.2 127.0.0.1:/media /tmpdir # cd /opt/ltp # ./runltp -d /tmpdir -s utimes01 # ./runltp -d /tmpdir -s utime06 This issue occurs because nfs_setattr does not verify the inode's UID against the caller's fsuid when delegated timestamps are permitted for the inode. This patch adds the UID check and if it does not match then the request is sent to the server for permission checking.

CVSS

No CVSS.

References

Link	Resource
https://git.kernel.org/stable/c/0e9be902041c6b9f0ed4b72764187eed1067a42f
https://git.kernel.org/stable/c/b2e4cda71ed062c87573b016d2d956a62f4258ed
https://git.kernel.org/stable/c/b623390045a81fc559decb9bfeb79319721d3dfb

Configurations

No configuration.

History

No history.

Information

Published : 2025-12-16 15:15

Updated : 2026-06-17 09:58

NVD link : CVE-2025-68242

Mitre link : CVE-2025-68242

CVE.ORG link : CVE-2025-68242

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2025-68242", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "e12912d94137ab36ee704a91f465ff15c8b423da", "lessThan": "b2e4cda71ed062c87573b016d2d956a62f4258ed", "versionType": "git"}, {"status": "affected", "version": "e12912d94137ab36ee704a91f465ff15c8b423da", "lessThan": "0e9be902041c6b9f0ed4b72764187eed1067a42f", "versionType": "git"}, {"status": "affected", "version": "e12912d94137ab36ee704a91f465ff15c8b423da", "lessThan": "b623390045a81fc559decb9bfeb79319721d3dfb", "versionType": "git"}], "programFiles": ["fs/nfs/inode.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.11"}, {"status": "unaffected", "version": "0", "lessThan": "6.11", "versionType": "semver"}, {"status": "unaffected", "version": "6.12.59", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.17.9", "versionType": "semver", "lessThanOrEqual": "6.17.*"}, {"status": "unaffected", "version": "6.18", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/nfs/inode.c"], "defaultStatus": "affected"}]}], "published": "2025-12-16T15:15:53.430", "references": [{"url": "https://git.kernel.org/stable/c/0e9be902041c6b9f0ed4b72764187eed1067a42f", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/b2e4cda71ed062c87573b016d2d956a62f4258ed", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/b623390045a81fc559decb9bfeb79319721d3dfb", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Deferred", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFS: Fix LTP test failures when timestamps are delegated\n\nThe utimes01 and utime06 tests fail when delegated timestamps are\nenabled, specifically in subtests that modify the atime and mtime\nfields using the 'nobody' user ID.\n\nThe problem can be reproduced as follow:\n\n# echo \"/media *(rw,no_root_squash,sync)\" >> /etc/exports\n# export -ra\n# mount -o rw,nfsvers=4.2 127.0.0.1:/media /tmpdir\n# cd /opt/ltp\n# ./runltp -d /tmpdir -s utimes01\n# ./runltp -d /tmpdir -s utime06\n\nThis issue occurs because nfs_setattr does not verify the inode's\nUID against the caller's fsuid when delegated timestamps are\npermitted for the inode.\n\nThis patch adds the UID check and if it does not match then the\nrequest is sent to the server for permission checking."}], "lastModified": "2026-06-17T09:58:47.670", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}