PT-2026-2538 · Linux+2 · Linux Kernel+2

Published

2026-01-13

·

Updated

2026-05-11

·

CVE-2025-68806

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The smb2 set ea function, responsible for handling Extended Attributes (EA), had incorrect buffer validation checks. These checks did not account for the size of the null terminator required for the EA Name, potentially leading to buffer overflows. The issue has been addressed by including '+ 1' in the EaNameLength calculation to accurately reflect the total required buffer size.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

AZL-74312
CVE-2025-68806
ECHO-E807-ABB7-F0B4
MGASA-2026-0017
MGASA-2026-0018
USN-8177-1
USN-8177-2
USN-8179-1
USN-8179-2
USN-8179-3
USN-8179-4
USN-8183-1
USN-8183-2
USN-8184-1
USN-8185-1
USN-8185-2
USN-8203-1
USN-8204-1
USN-8245-1
USN-8257-1
USN-8258-1
USN-8260-1
USN-8261-1
USN-8265-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu