CVE-2025-68806 — Linux vulnerability
14 documents7 sources
Severity
6.4MEDIUM
No vectorEPSS
0.0%
top 88.46%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 13
Latest updateApr 17
Description
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix buffer validation by including null terminator size in EA length
The smb2_set_ea function, which handles Extended Attributes (EA),
was performing buffer validation checks that incorrectly omitted the size
of the null terminating character (+1 byte) for EA Name.
This patch fixes the issue by explicitly adding '+ 1' to EaNameLength where
the null terminator is expected to be present in the buffer, ensuring
the validat…
Affected Packages15 packages
▶CVEListV5linux/linuxd070c4dd2a5bed4e9832eec5b6c029c7d14892ea — cae52c592a07e1d3fa3338a5f064a374a5f26750+8
🔴Vulnerability Details
3GHSA▶
GHSA-4wfq-6xp5-vp47: In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix buffer validation by including null terminator size in EA length
The↗2026-01-13
OSV▶
CVE-2025-68806: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix buffer validation by including null terminator size in EA length The sm↗2026-01-13