TLS Certificate Matching Vulnerability in Linux Kernel for NFS Clients

CVE-2025-68243

What is CVE-2025-68243?

A vulnerability exists in the Linux kernel related to NFS clients, specifically in the handling of TLS certificates. When the TLS security policy is set to RPC_XPRTSEC_TLS_X509, it is crucial for the cert_serial and privkey_serial fields to match. These fields uniquely define the client's identity as recognized by the server. Failure to ensure this matching can lead to misidentification and potential security risks in communications between NFS clients and servers.

References