-

CVE-2025-68347

ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events

In the Linux kernel, the following vulnerability has been resolved:

ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events

The DSP event handling code in hwdep_read() could write more bytes to
the user buffer than requested, when a user provides a buffer smaller
than the event header size (8 bytes).

Fix by using min_t() to clamp the copy size, This ensures we never copy
more than the user requested.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 634ec0b2906efd46f6f57977e172aa3470aca432
Version < 16620f0617400746984362c3d6ac547eeae1d35f
Status affected
Version 634ec0b2906efd46f6f57977e172aa3470aca432
Version < ddd32ec66bc4eb6969fe835e4cc1c0706c6348fe
Status affected
Version 634ec0b2906efd46f6f57977e172aa3470aca432
Version < 6275fd726d53a8ec724f20201cf3bd862711e17b
Status affected
Version 634ec0b2906efd46f6f57977e172aa3470aca432
Version < 161291bac551821bba98eb4ea84c82338578d1b0
Status affected
Version 634ec0b2906efd46f6f57977e172aa3470aca432
Version < cdda0d06f8650e33255f79839f188bbece44117c
Status affected
Version 634ec0b2906efd46f6f57977e172aa3470aca432
Version < 210d77cca3d0494ed30a5c628b20c1d95fa04fb1
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.16
Status affected
Version 0
Version < 5.16
Status unaffected
Version <= 6.1.*
Version 6.1.160
Status unaffected
Version <= 6.6.*
Version 6.6.120
Status unaffected
Version <= 6.12.*
Version 6.12.63
Status unaffected
Version <= 6.17.*
Version 6.17.13
Status unaffected
Version <= 6.18.*
Version 6.18.2
Status unaffected
Version <= *
Version 6.19
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.09% 0.244
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.