CVE-2025-68281 — Incorrect Calculation of Buffer Size in Linux
Severity
7.2HIGHOSV
No vectorEPSS
0.0%
top 87.79%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 16
Latest updateApr 6
Description
In the Linux kernel, the following vulnerability has been resolved:
ASoC: SDCA: bug fix while parsing mipi-sdca-control-cn-list
"struct sdca_control" declares "values" field as integer array.
But the memory allocated to it is of char array. This causes
crash for sdca_parse_function API. This patch addresses the
issue by allocating correct data size.
Affected Packages6 packages
▶CVEListV5linux/linux50a479527ef01f9b36dde1803a7e81741a222509 — fcd5786b506c51cbabc2560c68e040d8dba22a0d+2