CVE-2025-68786

NameCVE-2025-68786
DescriptionIn the Linux kernel, the following vulnerability has been resolved: ksmbd: skip lock-range check on equal size to avoid size==0 underflow When size equals the current i_size (including 0), the code used to call check_lock_range(filp, i_size, size - 1, WRITE), which computes `size - 1` and can underflow for size==0. Skip the equal case.
SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
linux (PTS)bullseye5.10.223-1vulnerable
bullseye (security)5.10.247-1vulnerable
bookworm6.1.159-1vulnerable
bookworm (security)6.1.158-1vulnerable
trixie6.12.63-1vulnerable
trixie (security)6.12.48-1vulnerable
forky6.17.13-1vulnerable
sid6.18.3-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
linuxsource(unstable)6.18.3-1

Notes

https://git.kernel.org/linus/5d510ac31626ed157d2182149559430350cf2104 (6.19-rc1)

Search for package or bug name: Reporting problems