CVE-2025-68786: linux
Vulnerability summary
CVE-2025-68786 is a medium (CVSS 5.3) vulnerability in linux. EPSS estimates a 0.20% chance of exploitation in the next 30 days, higher than 9.4% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 23 · Related 20Timeline
- 13-01-2026PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: skip lock-range check on equal size to avoid size==0 underflow When size equals the current i_size (including 0), the code used to call check_lock_range(filp, i_size, size - 1, WRITE), which computes `size - 1` and can underflow for size==0. Skip the equal case.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.20%
Chance of exploitation in the next 30 days
Percentile
9%
Versus all other CVEs
30-day change
+0.01 pp
From 0.20% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu157 products
- linuxAll versions (No fix recorded) | < 6.8.0-110.110 | < 6.17.0-22.22
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 6.8.0-1052.55 | < 6.17.0-1012.12
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian1 product
- linux< 6.1.162-1 | < 6.12.69-1 | < 6.18.3-1
Linux1 product
- linux≥ f44158485826c076335d6860d35872271a83791d, < 52fcbb92e0d3acfd1448b2a43b6595d540da5295 | ≥ f44158485826c076335d6860d35872271a83791d, < da29cd197246c85c0473259f1cad897d9d28faea | ≥ f44158485826c076335d6860d35872271a83791d, < a6f4cfa3783804336491e0edcb250c25f9b59d33 | ≥ f44158485826c076335d6860d35872271a83791d, < 571204e4758a528fbd67330bd4b0dfbdafb33dd8 | ≥ f44158485826c076335d6860d35872271a83791d, < 5d510ac31626ed157d2182149559430350cf2104 | 5.15
3 vendors · 159 products
