CVE-2025-68786

Source
https://cve.org/CVERecord?id=CVE-2025-68786
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-68786.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-68786
Downstream
Related
Published
2026-01-13T15:28:59.578Z
Modified
2026-03-20T12:46:29.102578Z
Summary
ksmbd: skip lock-range check on equal size to avoid size==0 underflow
Details

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: skip lock-range check on equal size to avoid size==0 underflow

When size equals the current isize (including 0), the code used to call checklockrange(filp, isize, size - 1, WRITE), which computes size - 1 and can underflow for size==0. Skip the equal case.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68786.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
f44158485826c076335d6860d35872271a83791d
Fixed
52fcbb92e0d3acfd1448b2a43b6595d540da5295
Fixed
da29cd197246c85c0473259f1cad897d9d28faea
Fixed
a6f4cfa3783804336491e0edcb250c25f9b59d33
Fixed
571204e4758a528fbd67330bd4b0dfbdafb33dd8
Fixed
5d510ac31626ed157d2182149559430350cf2104

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-68786.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.15.0
Fixed
6.1.160
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.120
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.64
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.3

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-68786.json"