CVE-2025-68764CWE-862broken-access-control

CVE-2025-68764

High · published January 5, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
2.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags

When a filesystem is being automounted, it needs to preserve the

user-set superblock mount options, such as the "ro" flag.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00138 · 2.9th percentile
Weakness
CWE-862 · Missing Authorization
Published
2026-01-05T15:15Z
References (10)
EPSS history
Timeline
  • 05 JAN 09:44Z
    NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags
    cvelistv5