High 7.8Published Jan 5, 2026

CVE-2025-68764NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags

Updated under an hour ago (Oct 28, 2026, 3:10 AM ET)

Does this affect you?

It affects Linux and 3 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags When a filesystem is being automounted, it needs to preserve the user-set superblock mount options, such as the "ro" flag.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-862
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: Oct 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from f2aedb713c284429987dc66c7aaf38decfc8da2a before a3dc6c40bcab1a888d5c0d134ccc0746b4c98929; from f2aedb713c284429987dc66c7aaf38decfc8da2a before ba1495aefd22fcf0746a2a3025c95d766d7cde4d; from f2aedb713c284429987dc66c7aaf38decfc8da2a before c09070b4def1b34e473a746c6a5331ccb80902c1; from f2aedb713c284429987dc66c7aaf38decfc8da2a before dce10c59211e5cd763a62ea01e79b82a629811e3; from f2aedb713c284429987dc66c7aaf38decfc8da2a before 612cc98698d667df804792f0c47d4e501e66da29; from f2aedb713c284429987dc66c7aaf38decfc8da2a before 4b296944e632cf4c6a4cc8e2585c6451eae47b1b; from f2aedb713c284429987dc66c7aaf38decfc8da2a before df9b003a2ecacc7218486fbb31fe008c93097d5f; from f2aedb713c284429987dc66c7aaf38decfc8da2a before 8675c69816e4276b979ff475ee5fac4688f80125	CNA record
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP

References

References

https://git.kernel.org/stable/c/a3dc6c40bcab1a888d5c0d134ccc0746b4c98929
https://git.kernel.org/stable/c/ba1495aefd22fcf0746a2a3025c95d766d7cde4d
https://git.kernel.org/stable/c/c09070b4def1b34e473a746c6a5331ccb80902c1
https://git.kernel.org/stable/c/dce10c59211e5cd763a62ea01e79b82a629811e3
https://git.kernel.org/stable/c/612cc98698d667df804792f0c47d4e501e66da29
https://git.kernel.org/stable/c/4b296944e632cf4c6a4cc8e2585c6451eae47b1b
https://git.kernel.org/stable/c/df9b003a2ecacc7218486fbb31fe008c93097d5f
https://git.kernel.org/stable/c/8675c69816e4276b979ff475ee5fac4688f80125
https://cert-portal.siemens.com/productcert/html/ssa-019113.html
https://cert-portal.siemens.com/productcert/html/ssa-457936.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.