CVE-2025-68284

An out-of-bounds write vulnerability was found in the Ceph authentication handling code in the Linux kernel. The handle_auth_session_key() function uses a length field from network packets without proper validation, potentially allowing out-of-bounds memory writes during connection secret decryption or service ticket processing.

A malicious Ceph monitor or man-in-the-middle attacker could exploit this by sending specially crafted authentication responses. Systems using CephFS or RBD are potentially affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.