CVE-2025-68242: NFS: Fix LTP test failures when timestamps are delegated
In the Linux kernel, the following vulnerability has been resolved:
NFS: Fix LTP test failures when timestamps are delegated
The utimes01 and utime06 tests fail when delegated timestamps are enabled, specifically in subtests that modify the atime and mtime fields using the 'nobody' user ID.
The problem can be reproduced as follow:
echo "/media (rw,norootsquash,sync)" >> /etc/exports export -ra mount -o rw,nfsvers=4.2 127.0.0.1:/media /tmpdir cd /opt/ltp ./runltp -d /tmpdir -s utimes01 ./runltp -d /tmpdir -s utime06
This issue occurs because nfssetattr does not verify the inode's UID against the caller's fsuid when delegated timestamps are permitted for the inode.
This patch adds the UID check and if it does not match then the request is sent to the server for permission checking.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68242?
CVE-2025-68242 has a medium severity level due to its impact on NFS timestamp handling.
How do I fix CVE-2025-68242?
To fix CVE-2025-68242, update your Linux kernel to the latest stable version that includes the fix.
What components are affected by CVE-2025-68242?
CVE-2025-68242 affects the Linux kernel specifically related to NFS delegation and timestamp handling.
Can CVE-2025-68242 lead to data loss?
While CVE-2025-68242 is primarily an issue with timestamp modification, improper handling could lead to inconsistencies in file access times.
Is CVE-2025-68242 a remote exploitation risk?
CVE-2025-68242 primarily affects local operations, but it could indirectly lead to remote exploitation scenarios in specific configurations.