CVE-2025-68347 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux
25 documents9 sources
Severity
7.2HIGHOSV
No vectorEPSS
0.1%
top 79.77%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 24
Latest updateApr 17
Description
In the Linux kernel, the following vulnerability has been resolved:
ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events
The DSP event handling code in hwdep_read() could write more bytes to
the user buffer than requested, when a user provides a buffer smaller
than the event header size (8 bytes).
Fix by using min_t() to clamp the copy size, This ensures we never copy
more than the user requested.
Affected Packages16 packages
🔴Vulnerability Details
9📋Vendor Advisories
13🕵️Threat Intelligence
1💬Community
1Bugzilla▶
CVE-2025-68347 kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events↗2025-12-24