CVE-2025-68806

A flaw was found in ksmbd in the Linux kernel. The smb2_set_ea function, responsible for handling Extended Attributes (EA), contained a buffer validation error. This error occurred because the size of the null terminating character was incorrectly omitted during length calculations for EA Name. A remote attacker could exploit this vulnerability to potentially disclose sensitive information.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.