BaseFortify

Publication date: 2026-01-13

Last updated on: 2026-01-14

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix buffer validation by including null terminator size in EA length The smb2_set_ea function, which handles Extended Attributes (EA), was performing buffer validation checks that incorrectly omitted the size of the null terminating character (+1 byte) for EA Name. This patch fixes the issue by explicitly adding '+ 1' to EaNameLength where the null terminator is expected to be present in the buffer, ensuring the validation accurately reflects the total required buffer size.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-13

Last Modified

2026-01-14

Generated

2026-07-06

AI Q&A

2026-01-14

EPSS Evaluated

2026-07-05

NVD

CVE-2025-68806

EUVD

EUVD-2026-2305

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Impact Analysis

Because the buffer validation omitted the null terminator size, it could potentially allow malformed or improperly sized buffers to be processed, which might lead to buffer overflows or memory corruption. This could result in system instability, crashes, or potentially allow an attacker to execute arbitrary code or cause denial of service.

Executive Summary

This vulnerability is in the Linux kernel's ksmbd component, specifically in the smb2_set_ea function that handles Extended Attributes (EA). The function was incorrectly validating buffers by not including the size of the null terminator character in the EA Name length calculation. This omission could lead to improper buffer validation. The fix adds '+1' to the EaNameLength to account for the null terminator, ensuring the buffer size validation is accurate.

Hi! I’m here to help you understand CVE-2025-68806. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70