CVE-2025-68243 — Improper Certificate Validation in Linux
Severity
4.7MEDIUM
No vectorEPSS
0.0%
top 94.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 16
Latest updateFeb 24
Description
In the Linux kernel, the following vulnerability has been resolved:
NFS: Check the TLS certificate fields in nfs_match_client()
If the TLS security policy is of type RPC_XPRTSEC_TLS_X509, then the
cert_serial and privkey_serial fields need to match as well since they
define the client's identity, as presented to the server.
Affected Packages5 packages
▶CVEListV5linux/linux90c9550a8d65fb9b1bf87baf97a04ed91bf61b33 — b8fa37219074811c04d4ecb742c73e2b296da6a8+2