CVE-2025-68806 ksmbd: fix buffer validation by including null terminator size in EA length

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Out-of-Bounds Vulnerabilities in ksmbd Addressed Microsoft has published information regarding two critical vulnerabilities in ksmbd, identified as CVE-2024-56626 and CVE-2024-56627. These vulnerabilities involve an out-of-bounds write and an out-of-bounds read, respectively, affecting the ksmbd file server component. Both CVEs were published on December 27, 2024. 12 sources 39