In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid Fixes… (CVE-2025-68349)
A vulnerability in the Linux kernel related to NFSv4/pNFS has been resolved. The issue involves improper handling of the NFS_INO_LAYOUTCOMMIT flag in the pnfs_mark_layout_stateid_invalid function, which could lead to a crash when the layout is null during certain inode write operations. This occurs because the code might attempt to reference a null layout if the flag is not cleared properly.
AI Analysis
Technical Summary
The vulnerability in the Linux kernel's NFSv4/pNFS implementation is due to failure to clear the NFS_INO_LAYOUTCOMMIT flag in the pnfs_mark_layout_stateid_invalid function. This flaw can cause a crash when the layout pointer is null during the call stack involving write_inode, nfs4_write_inode, and pnfs_layoutcommit_inode. The pnfs_set_layoutcommit function relies on the layout segment reference count to maintain the layout's validity, and not clearing the flag may result in referencing a null layout, leading to a denial of service via a crash.
Potential Impact
The vulnerability results in a denial of service condition by causing a kernel crash (system crash) when the affected code path is executed with a null layout. There is no indication of confidentiality or integrity impact. The CVSS vector indicates no confidentiality or integrity loss but a high impact on availability.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since this is a kernel vulnerability, monitor official Linux kernel advisories for patches addressing CVE-2025-68349 and apply them promptly once available.
In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid Fixes… (CVE-2025-68349)
Description
A vulnerability in the Linux kernel related to NFSv4/pNFS has been resolved. The issue involves improper handling of the NFS_INO_LAYOUTCOMMIT flag in the pnfs_mark_layout_stateid_invalid function, which could lead to a crash when the layout is null during certain inode write operations. This occurs because the code might attempt to reference a null layout if the flag is not cleared properly.
CVSS v3.1
Score 7.5high
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in the Linux kernel's NFSv4/pNFS implementation is due to failure to clear the NFS_INO_LAYOUTCOMMIT flag in the pnfs_mark_layout_stateid_invalid function. This flaw can cause a crash when the layout pointer is null during the call stack involving write_inode, nfs4_write_inode, and pnfs_layoutcommit_inode. The pnfs_set_layoutcommit function relies on the layout segment reference count to maintain the layout's validity, and not clearing the flag may result in referencing a null layout, leading to a denial of service via a crash.
Potential Impact
The vulnerability results in a denial of service condition by causing a kernel crash (system crash) when the affected code path is executed with a null layout. There is no indication of confidentiality or integrity impact. The CVSS vector indicates no confidentiality or integrity loss but a high impact on availability.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since this is a kernel vulnerability, monitor official Linux kernel advisories for patches addressing CVE-2025-68349 and apply them promptly once available.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-pchw-pcf7-8p47
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2025-68349"]
- Database Specific Severity
- HIGH
- Cvss Version
- 3.1
Threat ID: 6a6b72d29c2644c7f847798c
Added to database: 07/30/2026, 15:50:42 UTC
Last enriched: 07/30/2026, 18:55:50 UTC
Last updated: 09/10/2026, 19:38:49 UTC
Views: 20
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.