BaseFortify

Publication date: 2026-01-13

Last updated on: 2026-01-14

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: skip lock-range check on equal size to avoid size==0 underflow When size equals the current i_size (including 0), the code used to call check_lock_range(filp, i_size, size - 1, WRITE), which computes `size - 1` and can underflow for size==0. Skip the equal case.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-13

Last Modified

2026-01-14

Generated

2026-07-06

AI Q&A

2026-01-14

EPSS Evaluated

2026-07-05

NVD

CVE-2025-68786

EUVD

EUVD-2026-2301

Affected Vendors & Products

Vendor	Product	Version / Range
linux_kernel	ksmbd	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel's ksmbd component involves an underflow issue when checking lock ranges. Specifically, when the size equals the current file size (including zero), the code calls a function with size - 1, which can cause an underflow if size is zero. The fix involves skipping the check when the sizes are equal to avoid this underflow.

Impact Analysis

The vulnerability could potentially cause incorrect behavior or errors in file locking mechanisms within the ksmbd service of the Linux kernel, possibly leading to stability or security issues related to file access. However, specific impacts are not detailed in the provided information.

Hi! I’m here to help you understand CVE-2025-68786. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70