CVE-2026-68388

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the smb3 simple fallocate range() function where the system may skip holes when an allocated range returned by the server starts before the current fallocate offset. This results in the skipped hole not being zero-filled despite the operation returning success, which can cause subsequent write operations to that hole to fail with an ENOSPC error. Additionally, a malformed range length could lead to an out-of-bounds read of the zero-buffer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.