CVE-2025-68806

Linux Kernel - Buffer Overflow in SMB2 Extended Attribute Handling

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix buffer validation by including null terminator size in EA length The smb2_set_ea function, which handles Extended Attributes (EA), was performing buffer validation checks that incorrectly omitted the size of the null terminating character (+1 byte) for EA Name. This patch fixes the issue by explicitly adding '+ 1' to EaNameLength where the null terminator is expected to be present in the buffer, ensuring the validation accurately reflects the total required buffer size.

Scores

EPSS 0.0005
EPSS Percentile 15.8%

Details

Status published
Products (23)
linux/Kernel < 6.1.160linux
linux/Kernel 6.2.0 - 6.6.120linux
linux/Kernel 6.6.0 - 6.12.64linux
linux/Kernel 6.7.0 - 6.18.3linux
Linux/Linux < 6.6
Linux/Linux 0ba5439d9afa2722e7728df56f272c89987540a4 - 6dc8cf6e7998ef7aeb9383a4c2904ea5d22fa2e4
Linux/Linux 0ba5439d9afa2722e7728df56f272c89987540a4 - 95d7a890e4b03e198836d49d699408fd1867cb55
Linux/Linux 0ba5439d9afa2722e7728df56f272c89987540a4 - a28a375a5439eb474e9f284509a407efb479c925
Linux/Linux 0ba5439d9afa2722e7728df56f272c89987540a4 - d26af6d14da43ab92d07bc60437c62901dc522e6
Linux/Linux 1a13ecb96230e8b7b91967e292836f7b01ec8111
... and 13 more
Published Jan 13, 2026
Tracked Since Feb 18, 2026