CVE-2025-68185

A race condition exists in the NFS4 client's nfs4_setup_readdir() function in the Linux kernel. The code dereferences ->d_parent->d_inode without holding d_lock, creating a theoretical race where the parent could be changed during the operation, leading to a null pointer dereference.

As noted by the patch author, this race is extremely difficult to trigger on real hardware. The fix adds proper locking as a precaution. Practical exploitation is considered unlikely.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.