CVE-2025-68786ksmbd: skip lock-range check on equal size to avoid size==0 underflow
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: ksmbd: skip lock-range check on equal size to avoid size==0 underflow When size equals the current i_size (including 0), the code used to call check_lock_range(filp, i_size, size - 1, WRITE), which computes `size - 1` and can underflow for size==0. Skip the equal case.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Deferred
- Record last updated
- May 11, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from f44158485826c076335d6860d35872271a83791d before 52fcbb92e0d3acfd1448b2a43b6595d540da5295; from f44158485826c076335d6860d35872271a83791d before da29cd197246c85c0473259f1cad897d9d28faea; from f44158485826c076335d6860d35872271a83791d before a6f4cfa3783804336491e0edcb250c25f9b59d33; from f44158485826c076335d6860d35872271a83791d before 571204e4758a528fbd67330bd4b0dfbdafb33dd8; from f44158485826c076335d6860d35872271a83791d before 5d510ac31626ed157d2182149559430350cf2104 | CNA record |
References
- https://git.kernel.org/stable/c/52fcbb92e0d3acfd1448b2a43b6595d540da5295
- https://git.kernel.org/stable/c/da29cd197246c85c0473259f1cad897d9d28faea
- https://git.kernel.org/stable/c/a6f4cfa3783804336491e0edcb250c25f9b59d33
- https://git.kernel.org/stable/c/571204e4758a528fbd67330bd4b0dfbdafb33dd8
- https://git.kernel.org/stable/c/5d510ac31626ed157d2182149559430350cf2104
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.