FlawAtlas
Search the atlas
CVE-2025-68284 Not scored

libceph: prevent potential out-of-bounds writes in handle_auth_session_key()

In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() The len field originates from untrusted network packets. Boundary checks have been added to prevent potential out-of-bounds writes when decrypting the connection secret or processing service tickets. [ idryomov: changelog ]

Exploit probability 0.2%
Published December 16, 2025
Required by Not available
Last source change July 15, 2026

02 / AFFECTED SOFTWARE

Affected packages

Linux Kernel
Unknown Unknown

03 / CONNECTIONS

Connected vulnerabilities

related OPENSUSE-SU-2026:20145-1
related SUSE-SU-2026:0411-1
related SUSE-SU-2026:0447-1
related SUSE-SU-2026:0471-1
related SUSE-SU-2026:0472-1
related SUSE-SU-2026:0474-1
related SUSE-SU-2026:0496-1
related SUSE-SU-2026:0587-1
related SUSE-SU-2026:0617-1
related SUSE-SU-2026:0939-1
related SUSE-SU-2026:0940-1
related SUSE-SU-2026:0941-1
related SUSE-SU-2026:0943-1
related SUSE-SU-2026:0944-1
related SUSE-SU-2026:0945-1
related SUSE-SU-2026:0946-1
related SUSE-SU-2026:0951-1
related SUSE-SU-2026:0983-1
related SUSE-SU-2026:0985-1
related SUSE-SU-2026:0992-1
related SUSE-SU-2026:0997-1
related SUSE-SU-2026:1000-1
related SUSE-SU-2026:1002-1
related SUSE-SU-2026:1039-1
related SUSE-SU-2026:1046-1
related SUSE-SU-2026:1048-1
related SUSE-SU-2026:1049-1
related SUSE-SU-2026:1059-1
related SUSE-SU-2026:1073-1
related SUSE-SU-2026:1083-1
related SUSE-SU-2026:1089-1
related SUSE-SU-2026:1096-1
related SUSE-SU-2026:1099-1
related SUSE-SU-2026:1100-1
related SUSE-SU-2026:1101-1
related SUSE-SU-2026:1102-1
related SUSE-SU-2026:1125-1
related SUSE-SU-2026:1132-1
related SUSE-SU-2026:1136-1
related SUSE-SU-2026:20207-1
related SUSE-SU-2026:20220-1
related SUSE-SU-2026:20228-1
related SUSE-SU-2026:20477-1
related SUSE-SU-2026:20498-1
related SUSE-SU-2026:20828-1
related SUSE-SU-2026:20829-1
related SUSE-SU-2026:20831-1
related SUSE-SU-2026:20832-1
related SUSE-SU-2026:20837-1
related SUSE-SU-2026:20840-1
related SUSE-SU-2026:20841-1
related SUSE-SU-2026:20842-1
related SUSE-SU-2026:20845-1
related SUSE-SU-2026:20853-1
related SUSE-SU-2026:20854-1
related SUSE-SU-2026:20855-1
related SUSE-SU-2026:20856-1
related SUSE-SU-2026:20862-1
related SUSE-SU-2026:20863-1
related SUSE-SU-2026:20864-1
related SUSE-SU-2026:20865-1
related SUSE-SU-2026:20866-1
related SUSE-SU-2026:20876-1
related SUSE-SU-2026:20885-1
related SUSE-SU-2026:20886-1
related SUSE-SU-2026:20887-1
related SUSE-SU-2026:20888-1
related SUSE-SU-2026:20889-1
related SUSE-SU-2026:20897-1
related SUSE-SU-2026:20898-1
related SUSE-SU-2026:20899-1
related SUSE-SU-2026:20900-1
related SUSE-SU-2026:20944-1
related SUSE-SU-2026:20945-1
related SUSE-SU-2026:20946-1
related SUSE-SU-2026:20947-1

04 / EVIDENCE

Source records

Open Source Vulnerabilities CVE-2025-68284

In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() The len field originates from untrusted network packets. Boundary checks have been added to prevent potential out-of-bounds writes when decrypting the connection secret or processing service tickets. [ idryomov: changelog ]

View original source

05 / REFERENCES

Further evidence