CVE-2025-68297

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc7+

Description The Linux kernel contains a flaw in the Ceph implementation, specifically within the ceph con v2 try read function. This issue can lead to a crash when processing sparse reads for fscrypt-encrypted directories using the Ceph msgr2 protocol in secure mode. The crash can be triggered by mounting a Ceph filesystem, creating a directory, copying a file into it, encrypting the directory, unlocking it, and then attempting to read the file. The root cause is a general protection fault, potentially due to a non-canonical address.

Recommendations Update to a version of the Linux kernel that contains the fix for this issue.