CVE-2025-68764

In the Linux kernel, the following vulnerability has been resolved: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags When a filesystem is being automounted, it needs to preserve the user-set superblock mount options, such as the "ro" flag.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/4b296944e632cf4c6a4cc8e2585c6451eae47b1b
https://git.kernel.org/stable/c/612cc98698d667df804792f0c47d4e501e66da29
https://git.kernel.org/stable/c/8675c69816e4276b979ff475ee5fac4688f80125
https://git.kernel.org/stable/c/a3dc6c40bcab1a888d5c0d134ccc0746b4c98929
https://git.kernel.org/stable/c/ba1495aefd22fcf0746a2a3025c95d766d7cde4d
https://git.kernel.org/stable/c/c09070b4def1b34e473a746c6a5331ccb80902c1
https://git.kernel.org/stable/c/dce10c59211e5cd763a62ea01e79b82a629811e3
https://git.kernel.org/stable/c/df9b003a2ecacc7218486fbb31fe008c93097d5f
https://cert-portal.siemens.com/productcert/html/ssa-019113.html
https://cert-portal.siemens.com/productcert/html/ssa-457936.html

Configurations

No configuration.

History

19 Oct 2026, 19:17

Type	Values Removed	Values Added
CWE		CWE-862

15 Oct 2026, 02:18

Type	Values Removed	Values Added
References		() https://cert-portal.siemens.com/productcert/html/ssa-457936.html -

14 Oct 2026, 19:10

Type	Values Removed	Values Added
Summary		(es) En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: NFS: Los sistemas de archivos automontados deberían heredar las banderas ro,noexec,nodev,sync Cuando un sistema de archivos está siendo automontado, necesita preservar las opciones de montaje del superbloque establecidas por el usuario, como la bandera 'ro'.

Information

Published : 2026-01-05 10:15

Updated : 2026-10-19 19:17

NVD link : CVE-2025-68764

Mitre link : CVE-2025-68764

CVE.ORG link : CVE-2025-68764

JSON object : View

Products Affected

No product.

CWE

CWE-862

Missing Authorization

{"id": "CVE-2025-68764", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-68764", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-16T16:51:54.569623Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "f2aedb713c284429987dc66c7aaf38decfc8da2a", "lessThan": "a3dc6c40bcab1a888d5c0d134ccc0746b4c98929", "versionType": "git"}, {"status": "affected", "version": "f2aedb713c284429987dc66c7aaf38decfc8da2a", "lessThan": "ba1495aefd22fcf0746a2a3025c95d766d7cde4d", "versionType": "git"}, {"status": "affected", "version": "f2aedb713c284429987dc66c7aaf38decfc8da2a", "lessThan": "c09070b4def1b34e473a746c6a5331ccb80902c1", "versionType": "git"}, {"status": "affected", "version": "f2aedb713c284429987dc66c7aaf38decfc8da2a", "lessThan": "dce10c59211e5cd763a62ea01e79b82a629811e3", "versionType": "git"}, {"status": "affected", "version": "f2aedb713c284429987dc66c7aaf38decfc8da2a", "lessThan": "612cc98698d667df804792f0c47d4e501e66da29", "versionType": "git"}, {"status": "affected", "version": "f2aedb713c284429987dc66c7aaf38decfc8da2a", "lessThan": "4b296944e632cf4c6a4cc8e2585c6451eae47b1b", "versionType": "git"}, {"status": "affected", "version": "f2aedb713c284429987dc66c7aaf38decfc8da2a", "lessThan": "df9b003a2ecacc7218486fbb31fe008c93097d5f", "versionType": "git"}, {"status": "affected", "version": "f2aedb713c284429987dc66c7aaf38decfc8da2a", "lessThan": "8675c69816e4276b979ff475ee5fac4688f80125", "versionType": "git"}], "programFiles": ["fs/nfs/namespace.c", "fs/nfs/super.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.6"}, {"status": "unaffected", "version": "0", "lessThan": "5.6", "versionType": "semver"}, {"status": "unaffected", "version": "5.10.248", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.198", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.160", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.120", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.63", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.17.13", "versionType": "semver", "lessThanOrEqual": "6.17.*"}, {"status": "unaffected", "version": "6.18.2", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "6.19", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/nfs/namespace.c", "fs/nfs/super.c"], "defaultStatus": "affected"}]}, {"source": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e", "affectedData": [{"vendor": "Siemens", "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP", "versions": [{"status": "affected", "version": "V3.1.6", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP", "versions": [{"status": "affected", "version": "V3.1.7", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP", "versions": [{"status": "affected", "version": "V3.1.6", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP", "versions": [{"status": "affected", "version": "V3.1.7", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP", "versions": [{"status": "affected", "version": "V3.1.6", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP", "versions": [{"status": "affected", "version": "V3.1.7", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP", "versions": [{"status": "affected", "version": "V3.1.6", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP", "versions": [{"status": "affected", "version": "V3.1.7", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP", "versions": [{"status": "affected", "version": "V3.1.6", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP", "versions": [{"status": "affected", "version": "V3.1.7", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}]}], "published": "2026-01-05T10:15:57.587", "references": [{"url": "https://git.kernel.org/stable/c/4b296944e632cf4c6a4cc8e2585c6451eae47b1b", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/612cc98698d667df804792f0c47d4e501e66da29", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/8675c69816e4276b979ff475ee5fac4688f80125", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/a3dc6c40bcab1a888d5c0d134ccc0746b4c98929", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/ba1495aefd22fcf0746a2a3025c95d766d7cde4d", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/c09070b4def1b34e473a746c6a5331ccb80902c1", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/dce10c59211e5cd763a62ea01e79b82a629811e3", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/df9b003a2ecacc7218486fbb31fe008c93097d5f", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://cert-portal.siemens.com/productcert/html/ssa-019113.html", "source": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}, {"url": "https://cert-portal.siemens.com/productcert/html/ssa-457936.html", "source": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags\n\nWhen a filesystem is being automounted, it needs to preserve the\nuser-set superblock mount options, such as the \"ro\" flag."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nNFS: Los sistemas de archivos automontados deber\u00edan heredar las banderas ro,noexec,nodev,sync\n\nCuando un sistema de archivos est\u00e1 siendo automontado, necesita preservar las opciones de montaje del superbloque establecidas por el usuario, como la bandera 'ro'."}], "lastModified": "2026-10-19T19:17:04.170", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}