CVE-2025-68764: linux
CVSS: 7.8v3.1HighDeferred
AliasesUBUNTU-CVE-2025-68764DEBIAN-CVE-2025-68764
Published 05-01-2026Last modified 15-10-2026
Vulnerability summary
CVE-2025-68764 is a high (CVSS 7.8) vulnerability in linux. EPSS estimates a 0.15% chance of exploitation in the next 30 days, higher than 4.2% of scored vulnerabilities.
CVSS score
7.8/10
010
High · v3.1 (CVE.org)EPSS score
0.15%
0%100%
Low · +0.01 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 46 · Related 44DLA-4475-1DLA-4476-1DSA-6127-1OPENSUSE-SU-2026:10039-1OPENSUSE-SU-2026:10301-1OPENSUSE-SU-2026:20287-1SUSE-SU-2026:0447-1SUSE-SU-2026:0472-1SUSE-SU-2026:0587-1SUSE-SU-2026:20477-1SUSE-SU-2026:20498-1SUSE-SU-2026:20555-1SUSE-SU-2026:20570-1SUSE-SU-2026:20599-1SUSE-SU-2026:20615-1SUSE-SU-2026:20845-1SUSE-SU-2026:20876-1USN-8094-1USN-8094-2USN-8094-3USN-8094-4USN-8094-5USN-8096-1USN-8096-2USN-8096-3USN-8096-4USN-8096-5USN-8116-1USN-8141-1USN-8152-1USN-8163-1USN-8163-2USN-8179-1USN-8179-2USN-8179-3USN-8179-4USN-8184-1USN-8185-1USN-8185-2USN-8203-1USN-8204-1USN-8243-1USN-8258-1USN-8261-1USN-8265-1USN-8440-1USN-8260-1
Timeline
- 05-01-2026PublishedVulnerability first disclosed.
- 15-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags When a filesystem is being automounted, it needs to preserve the user-set superblock mount options, such as the "ro" flag.
CVSS metrics
4 scores · 4 sources · 1 versionHigh 7.8Preferred score · CVE.org (CNA)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSourcesAll 4 agree
- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.15%
Chance of exploitation in the next 30 days
Percentile
4%
Versus all other CVEs
30-day change
+0.01 pp
From 0.15% on 19-09-2026
19-09-202619-10-2026
EPSS score0.15%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu144 products
- linux< 5.15.0-173.183 | < 6.8.0-110.110 | < 6.17.0-19.19
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 5.15.0-1103.110 | < 6.8.0-1052.55 | < 6.17.0-1009.9
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian1 product
- linux< 6.1.162-1 | < 6.12.63-1 | < 6.17.13-1
Linux1 product
- linux≥ f2aedb713c284429987dc66c7aaf38decfc8da2a, < a3dc6c40bcab1a888d5c0d134ccc0746b4c98929 | ≥ f2aedb713c284429987dc66c7aaf38decfc8da2a, < ba1495aefd22fcf0746a2a3025c95d766d7cde4d | ≥ f2aedb713c284429987dc66c7aaf38decfc8da2a, < c09070b4def1b34e473a746c6a5331ccb80902c1 | ≥ f2aedb713c284429987dc66c7aaf38decfc8da2a, < dce10c59211e5cd763a62ea01e79b82a629811e3 | ≥ f2aedb713c284429987dc66c7aaf38decfc8da2a, < 612cc98698d667df804792f0c47d4e501e66da29 | ≥ f2aedb713c284429987dc66c7aaf38decfc8da2a, < 4b296944e632cf4c6a4cc8e2585c6451eae47b1b | ≥ f2aedb713c284429987dc66c7aaf38decfc8da2a, < df9b003a2ecacc7218486fbb31fe008c93097d5f | ≥ f2aedb713c284429987dc66c7aaf38decfc8da2a, < 8675c69816e4276b979ff475ee5fac4688f80125 | 5.6
3 vendors · 146 products