CVE-2025-68243
BaseFortify
Publication date: 2025-12-16
Last updated on: 2025-12-18
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves the Linux kernel's NFS implementation where the TLS certificate fields were not properly checked in the nfs_match_client() function. Specifically, when the TLS security policy is of type RPC_XPRTSEC_TLS_X509, the cert_serial and privkey_serial fields, which define the client's identity to the server, need to match. The vulnerability was that this check was missing or insufficient, potentially allowing identity mismatches.
How can this vulnerability impact me? :
If exploited, this vulnerability could allow an attacker to impersonate a legitimate client by presenting mismatched TLS certificate fields, potentially leading to unauthorized access or man-in-the-middle attacks on NFS communications.