CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key()
In the Linux kernel, the following vulnerability has been resolved:
libceph: prevent potential out-of-bounds writes in handleauthsessionkey()
The len field originates from untrusted network packets. Boundary checks have been added to prevent potential out-of-bounds writes when decrypting the connection secret or processing service tickets.
[ idryomov: changelog ]
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68284?
CVE-2025-68284 is classified as a medium severity vulnerability.
How do I fix CVE-2025-68284?
To fix CVE-2025-68284, update your Linux kernel to the latest patched version that includes the fix.
What software is affected by CVE-2025-68284?
CVE-2025-68284 affects the Linux kernel due to its handling of untrusted network packets.
What potential impact does CVE-2025-68284 have?
CVE-2025-68284 could allow for potential out-of-bounds writes, which may lead to system instability or exploitation.
When was CVE-2025-68284 reported?
The specific reporting date for CVE-2025-68284 is not provided, but it pertains to a recently discovered vulnerability in the Linux kernel.