CVE-2025-68284
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk41th percentile - higher than 41% of all known CVEs
Summary
In the Linux kernel's libceph library, the handle_auth_session_key() function lacks validation of the length field from network packets. The len field originates from untrusted packets, potentially leading to out-of-bounds writes when decrypting the connection secret or processing service tickets.
Risk Assessment
An attacker could remotely cause kernel memory corruption or potentially execute code by sending crafted Ceph packets with an invalid length field.
Recommendation
Apply the Linux kernel patch for CVE-2025-68284 that adds boundary checks before write operations in handle_auth_session_key().
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() The len field originates from untrusted network packets. Boundary checks have been added to prevent potential out-of-bounds writes when decrypting the connection secret or processing service tickets. [ idryomov: changelog ]