Out-of-Bounds Write Vulnerability in Linux Kernel's libceph Component

CVE-2025-68284

What is CVE-2025-68284?

The Linux kernel's libceph component has a vulnerability that could lead to out-of-bounds writes when handling untrusted network packets. This issue arises during the processing of authentication session keys, where inadequate boundary checks can result in unsafe writes and potential exploitation scenarios. In response, developers have implemented robust checks to secure the decryption of connection secrets and the management of service tickets, thereby enhancing the overall security posture of the affected component.

References