CVE-2025-68764 NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Affecting nfsd Identified by Microsoft Microsoft has published information on two vulnerabilities affecting the nfsd service. CVE-2024-42078, published on July 29, 2024, involves early initialization of nfsd_info.mutex, while CVE-2025-38231, published on July 4, 2025, addresses the initialization of ssc before laundromat_work to prevent NULL dereference. Both vulnerabilities may impact systems utilizing the nfsd service. 12 sources 39