CVE-2025-68349 NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Affecting nfsd Identified by Microsoft Microsoft has published information on two vulnerabilities affecting the nfsd service. CVE-2024-42078, published on July 29, 2024, involves early initialization of nfsd_info.mutex, while CVE-2025-38231, published on July 4, 2025, addresses the initialization of ssc before laundromat_work to prevent NULL dereference. Both vulnerabilities may impact systems utilizing the nfsd service. 12 sources 39