PT-2026-2538 · Linux+2 · Linux Kernel+2

CVE-2025-68806 · Published 2025-12-14 · Updated 2026-06-16

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The smb2 set ea function, responsible for handling Extended Attributes (EA), had incorrect buffer validation checks. These checks did not account for the size of the null terminator required for the EA Name, potentially leading to buffer overflows. The issue has been addressed by including '+ 1' in the EaNameLength calculation to accurately reflect the total required buffer size.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

AZL-74312

BDU:2026-09528

CVE-2025-68806

ECHO-E807-ABB7-F0B4

MGASA-2026-0017

MGASA-2026-0018

USN-8177-1

USN-8177-2

USN-8179-1

USN-8179-2

USN-8179-3

USN-8179-4

USN-8183-1

USN-8183-2

USN-8184-1

USN-8185-1

USN-8185-2

USN-8203-1

USN-8204-1

USN-8245-1

USN-8257-1

USN-8258-1

USN-8260-1

USN-8261-1

USN-8265-1

USN-8440-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 934

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68806.json · Exploit
• https://ubuntu.com/security/CVE-2025-68822 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40337 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40171 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40111 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39850 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22121 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71162 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39883 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39940 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68264 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-47336 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68301 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23068 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39995 · Vendor Advisory