CVE-2025-68783 — Improper Validation of Specified Index, Position, or Offset in Input in Linux
CWE-1285 — Improper Validation of Specified Index, Position, or Offset in Input30 documents7 sources
Severity
7.8HIGHOSV
No vectorEPSS
0.1%
top 83.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 13
Latest updateApr 17
Description
In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-mixer: us16x08: validate meter packet indices
get_meter_levels_from_urb() parses the 64-byte meter packets sent by
the device and fills the per-channel arrays meter_level[],
comp_level[] and master_level[] in struct snd_us16x08_meter_store.
Currently the function derives the channel index directly from the
meter packet (MUB2(meter_urb, s) - 1) and uses it to index those
arrays without validating the range. If the pa…
Affected Packages16 packages
▶CVEListV5linux/linuxd2bb390a2081a36ffe906724d2848d846f2aeb29 — 53461710a95e15ac1f6542450943a492ecf8e550+7
🔴Vulnerability Details
10OSV▶
linux-aws-5.15, linux-gcp-5.15, linux-gke, linux-hwe-5.15, linux-intel-iotg-5.15, linux-lowlatency-hwe-5.15, linux-oracle-5.15 vulnerabilities↗2026-03-17