Home

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events The DSP event handling code in hwdep_read() could write more bytes to the user buffer than requested, when a user provides a buffer smaller than the event header size (8 bytes). Fix by using min_t() to clamp the copy size, This ensures we never copy more than the user requested.

PUBLISHED Reserved 2025-12-16 | Published 2025-12-24 | Updated 2025-12-24 | Assigner Linux

Product status

Default status
unaffected

634ec0b2906efd46f6f57977e172aa3470aca432 (git) before 6275fd726d53a8ec724f20201cf3bd862711e17b
affected

634ec0b2906efd46f6f57977e172aa3470aca432 (git) before 161291bac551821bba98eb4ea84c82338578d1b0
affected

634ec0b2906efd46f6f57977e172aa3470aca432 (git) before cdda0d06f8650e33255f79839f188bbece44117c
affected

634ec0b2906efd46f6f57977e172aa3470aca432 (git) before 210d77cca3d0494ed30a5c628b20c1d95fa04fb1
affected

Default status
affected

5.16
affected

Any version before 5.16
unaffected

6.12.63 (semver)
unaffected

6.17.13 (semver)
unaffected

6.18.2 (semver)
unaffected

6.19-rc1 (original_commit_for_fix)
unaffected

References

git.kernel.org/...c/6275fd726d53a8ec724f20201cf3bd862711e17b

git.kernel.org/...c/161291bac551821bba98eb4ea84c82338578d1b0

git.kernel.org/...c/cdda0d06f8650e33255f79839f188bbece44117c

git.kernel.org/...c/210d77cca3d0494ed30a5c628b20c1d95fa04fb1

cve.org (CVE-2025-68347)

nvd.nist.gov (CVE-2025-68347)

Download JSON

Data based on CVE®. Copyright © 1999-2025, The MITRE Corporation. All rights reserved.