{"id":"CVE-2025-68349","revision":"c100c42ff8584ccc94ad33f8507a18ee","records":[{"revision":"c100c42ff8584ccc94ad33f8507a18ee","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-68349","aliases":[],"title":"NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nNFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid\n\nFixes a crash when layout is null during this call stack:\n\nwrite_inode\n    -> nfs4_write_inode\n        -> pnfs_layoutcommit_inode\n\npnfs_set_layoutcommit relies on the lseg refcount to keep the layout\naround. Need to clear NFS_INO_LAYOUTCOMMIT otherwise we might attempt\nto reference a null layout.","state":0,"publishedAt":"2025-12-24T10:32:41.253+00:00","modifiedAt":"2026-10-15T01:09:54.275+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/nfs/pnfs.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"fe1cf9469d7bcb6af27e42eb555a41b0135bce4a\",\n                            \"lessThan\": \"084bebe82ad86f718a3af84f34761863e63164ed\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"fe1cf9469d7bcb6af27e42eb555a41b0135bce4a\",\n                            \"lessThan\": \"b6e4e3a08c03200cc4b8067ec8ab3172a989d6fc\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"fe1cf9469d7bcb6af27e42eb555a41b0135bce4a\",\n                            \"lessThan\": \"104080582ae0aa6dce6c6d75ff89062efe84673b\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"fe1cf9469d7bcb6af27e42eb555a41b0135bce4a\",\n                            \"lessThan\": \"f718f9ea6094843b8c059b073af49ad61e9f49bb\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"fe1cf9469d7bcb6af27e42eb555a41b0135bce4a\",\n                            \"lessThan\": \"59947dff0fb7c19c09ce6dccbcd253fd542b6c25\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"fe1cf9469d7bcb6af27e42eb555a41b0135bce4a\",\n                            \"lessThan\": \"ca2e7fdad7c683b64821c94a58b9b68733214dad\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"fe1cf9469d7bcb6af27e42eb555a41b0135bce4a\",\n                            \"lessThan\": \"38694f9aae00459ab443a7dc8b3949a6b33b560a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"fe1cf9469d7bcb6af27e42eb555a41b0135bce4a\",\n                            \"lessThan\": \"e0f8058f2cb56de0b7572f51cd563ca5debce746\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/nfs/pnfs.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"4.10\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"4.10\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.248\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.198\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.160\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.120\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.63\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.17.13\",\n                            \"lessThanOrEqual\": \"6.17.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.2\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.19\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/084bebe82ad86f718a3af84f34761863e63164ed","https://git.kernel.org/stable/c/b6e4e3a08c03200cc4b8067ec8ab3172a989d6fc","https://git.kernel.org/stable/c/104080582ae0aa6dce6c6d75ff89062efe84673b","https://git.kernel.org/stable/c/f718f9ea6094843b8c059b073af49ad61e9f49bb","https://git.kernel.org/stable/c/59947dff0fb7c19c09ce6dccbcd253fd542b6c25","https://git.kernel.org/stable/c/ca2e7fdad7c683b64821c94a58b9b68733214dad","https://git.kernel.org/stable/c/38694f9aae00459ab443a7dc8b3949a6b33b560a","https://git.kernel.org/stable/c/e0f8058f2cb56de0b7572f51cd563ca5debce746"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-68349","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-68349","identifiers":["CVE-2025-68349"]},"retained":false,"historicalAffected":[]}],"coverage":[]}