CVE-2025-68349: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
In the Linux kernel, the following vulnerability has been resolved:
NFSv4/pNFS: Clear NFSINOLAYOUTCOMMIT in pnfsmarklayoutstateidinvalid
Fixes a crash when layout is null during this call stack:
writeinode - nfs4writeinode - pnfslayoutcommitinode
pnfssetlayoutcommit relies on the lseg refcount to keep the layout around. Need to clear NFSINOLAYOUTCOMMIT otherwise we might attempt to reference a null layout.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
NFSv4/pNFS: Clear NFSINOLAYOUTCOMMIT in pnfsmarklayoutstateidinvalid
Fixes a crash when layout is null during this call stack:
writeinode -> nfs4writeinode -> pnfslayoutcommitinode
pnfssetlayoutcommit relies on the lseg refcount to keep the layout around. Need to clear NFSINOLAYOUTCOMMIT otherwise we might attempt to reference a null layout.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68349?
CVE-2025-68349 has been classified with a high severity rating due to potential crash risks in the Linux kernel.
How do I fix CVE-2025-68349?
To address CVE-2025-68349, update your Linux kernel to the latest version where the vulnerability has been resolved.
What systems are affected by CVE-2025-68349?
CVE-2025-68349 affects all versions of the Linux kernel that have not implemented the patch for this vulnerability.
What are the potential impacts of CVE-2025-68349?
The potential impact of CVE-2025-68349 includes system crashes and instability when handling specific NFS operations.
Is there a workaround for CVE-2025-68349?
There are no known workarounds for CVE-2025-68349; updating the kernel is the recommended solution.