CVE-2025-68284 — Out-of-bounds Write in Linux
Severity
7.8HIGHOSV
OSV7.2OSV3.2
No vectorEPSS
0.1%
top 78.93%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 16
Latest updateApr 13
Description
In the Linux kernel, the following vulnerability has been resolved:
libceph: prevent potential out-of-bounds writes in handle_auth_session_key()
The len field originates from untrusted network packets. Boundary
checks have been added to prevent potential out-of-bounds writes when
decrypting the connection secret or processing service tickets.
[ idryomov: changelog ]
Affected Packages7 packages
▶CVEListV5linux/linux285ea34fc876aa0a2c5e65d310c4a41269e2e5f2 — f22c55a20a2d9ffbbac57408d5d488cef8201e9d+6