CVE-2025-68786

ksmbd: skip lock-range check on equal size to avoid size==0 underflow

State: Published
Severity: Not scored
Published: Jan 13, 2026
Updated: May 11, 2026
Reserved: Dec 24, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: skip lock-range check on equal size to avoid size==0 underflow

When size equals the current i_size (including 0), the code used to call check_lock_range(filp, i_size, size - 1, WRITE), which computes `size - 1` and can underflow for size==0. Skip the equal case.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	f44158485826c076335d6860d35872271a83791d to before 52fcbb92e0d3acfd1448b2a43b6595d540da5295Affected f44158485826c076335d6860d35872271a83791d to before da29cd197246c85c0473259f1cad897d9d28faeaAffected f44158485826c076335d6860d35872271a83791d to before a6f4cfa3783804336491e0edcb250c25f9b59d33Affected f44158485826c076335d6860d35872271a83791d to before 571204e4758a528fbd67330bd4b0dfbdafb33dd8Affected f44158485826c076335d6860d35872271a83791d to before 5d510ac31626ed157d2182149559430350cf2104Affected
LinuxLinux	5.15Affected before 5.15Not affected 6.1.160 through 6.1.Not affected 6.6.120 through 6.6.Not affected 6.12.64 through 6.12.Not affected 6.18.3 through 6.18.Not affected 6.19 and laterNot affected

Product

Versions

LinuxLinux

f44158485826c076335d6860d35872271a83791d to before 52fcbb92e0d3acfd1448b2a43b6595d540da5295Affected
f44158485826c076335d6860d35872271a83791d to before da29cd197246c85c0473259f1cad897d9d28faeaAffected
f44158485826c076335d6860d35872271a83791d to before a6f4cfa3783804336491e0edcb250c25f9b59d33Affected
f44158485826c076335d6860d35872271a83791d to before 571204e4758a528fbd67330bd4b0dfbdafb33dd8Affected
f44158485826c076335d6860d35872271a83791d to before 5d510ac31626ed157d2182149559430350cf2104Affected

LinuxLinux

5.15Affected
before 5.15Not affected
6.1.160 through 6.1.*Not affected
6.6.120 through 6.6.*Not affected
6.12.64 through 6.12.*Not affected
6.18.3 through 6.18.*Not affected
6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.