CVE-2025-68806
Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix buffer validation by including null terminator size in EA length The smb2_set_ea function, which handles Extended Attributes (EA), was performing buffer validation checks that incorrectly omitted the size of the null terminating character (+1 byte) for EA Name. This patch fixes the issue by explicitly adding '+ 1' to EaNameLength where the null terminator is expected to be present in the buffer, ensuring the validation accurately reflects the total required buffer size.
How to fix
- Linux Linuxcae52c592a07e1d3fa3338a5f064a374a5f26750, a28a375a5439eb474e9f284509a407efb479c925, d26af6d14da43ab92d07bc60437c62901dc522e6, 6dc8cf6e7998ef7aeb9383a4c2904ea5d22fa2e4, 95d7a890e4b03e198836d49d699408fd1867cb55, 6.1.160, 5.16, 6.5, 6.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | d070c4dd2a5bed4e9832eec5b6c029c7d14892ea ≤ v < cae52c592a07e1d3fa3338a5f064a374a5f26750, 0ba5439d9afa2722e7728df56f272c89987540a4 ≤ v < a28a375a5439eb474e9f284509a407efb479c925, 0ba5439d9afa2722e7728df56f272c89987540a4 ≤ v < d26af6d14da43ab92d07bc60437c62901dc522e6, 0ba5439d9afa2722e7728df56f272c89987540a4 ≤ v < 6dc8cf6e7998ef7aeb9383a4c2904ea5d22fa2e4, 0ba5439d9afa2722e7728df56f272c89987540a4 ≤ v < 95d7a890e4b03e198836d49d699408fd1867cb55, bb5bf157b5be1643cccc7cbbe57fcdef9ae52c2c, 1a13ecb96230e8b7b91967e292836f7b01ec8111, 404e7c01e16288b5e0171d1d8fd3328e806d0794, 6.1.52 ≤ v < 6.1.160, 5.15.131 ≤ v < 5.16, 6.4.15 ≤ v < 6.5, 6.5.2 ≤ v < 6.6, 6.6 | cae52c592a07e1d3fa3338a5f064a374a5f26750, a28a375a5439eb474e9f284509a407efb479c925, d26af6d14da43ab92d07bc60437c62901dc522e6, 6dc8cf6e7998ef7aeb9383a4c2904ea5d22fa2e4, 95d7a890e4b03e198836d49d699408fd1867cb55, 6.1.160, 5.16, 6.5, 6.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.