CVE-2025-68764: Linux

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags When a filesystem is being automounted, it needs to preserve the user-set superblock mount options, such as the "ro" flag.

Affected products

• Linux Linux: from 5.6, before 5.10.248 (fixed in 5.10.248); from 5.11, before 5.15.198 (fixed in 5.15.198); from 5.16, before 6.1.160 (fixed in 6.1.160); from 6.2, before 6.6.120 (fixed in 6.6.120); from 6.7, before 6.12.63 (fixed in 6.12.63); from 6.13, before 6.17.13 (fixed in 6.17.13); …
• Siemens SIMATIC s7-1500 CPU 1518-4 Pn/dp Mfp: from V3.1.6
• Siemens SIMATIC s7-1500 CPU 1518f-4 Pn/dp Mfp: from V3.1.6
• Siemens Siplus s7-1500 CPU 1518-4 Pn/dp Mfp: from V3.1.6

Published 2026-01-05. Last modified 2026-07-30.