Answer in brief
CVE-2025-68349 records a Unknown severity vulnerability in NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (generic), Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (generic), Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=fe1cf9469d7bcb6af27e42eb555a41b0135bce4a <084bebe82ad86f718a3af84f34761863e63164ed || >=fe1cf9469d7bcb6af27e42eb555a41b0135bce4a <b6e4e3a08c03200cc4b8067ec8ab3172a989d6fc || >=fe1cf9469d7bcb6af27e42eb555a41b0135bce4a <104080582ae0aa6dce6c6d75ff89062efe84673b || >=fe1cf9469d7bcb6af27e42eb555a41b0135bce4a <f718f9ea6094843b8c059b073af49ad61e9f49bb || >=fe1cf9469d7bcb6af27e42eb555a41b0135bce4a <59947dff0fb7c19c09ce6dccbcd253fd542b6c25 || >=fe1cf9469d7bcb6af27e42eb555a41b0135bce4a <ca2e7fdad7c683b64821c94a58b9b68733214dad || >=fe1cf9469d7bcb6af27e42eb555a41b0135bce4a <38694f9aae00459ab443a7dc8b3949a6b33b560a || >=fe1cf9469d7bcb6af27e42eb555a41b0135bce4a <e0f8058f2cb56de0b7572f51cd563ca5debce746 | 084bebe82ad86f718a3af84f34761863e63164ed, b6e4e3a08c03200cc4b8067ec8ab3172a989d6fc, 104080582ae0aa6dce6c6d75ff89062efe84673b, f718f9ea6094843b8c059b073af49ad61e9f49bb, 59947dff0fb7c19c09ce6dccbcd253fd542b6c25, ca2e7fdad7c683b64821c94a58b9b68733214dad, 38694f9aae00459ab443a7dc8b3949a6b33b560a, e0f8058f2cb56de0b7572f51cd563ca5debce746 |
| Linux/Linuxgeneric | 4.10 | Not reported |
| Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFPgeneric | >=V3.1.6 <* | * |
| Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFPgeneric | >=V3.1.6 <* | * |
| Siemens/SIPLUS S7-1500 CPU 1518-4 PN/DP MFPgeneric | >=V3.1.6 <* | * |
Published upstream
Dec 24, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Sep 8, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Jul 14, 2026
In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid Fixes a crash when layout is null during this call stack: write_inode -> nfs4_write_inode -> pnfs_layoutcommit_inode pnfs_set_layoutcommit relies on the lseg refcount to keep the layout around. Need to clear NFS_INO_LAYOUTCOMMIT otherwise we might attempt to reference a null layout.
Quoted source text, attributed separately from HOL analysis.