QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2025-68347

Back to search

CVE-2025-68347

Published: Dec 24, 2025

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events The DSP event handling code in hwdep_read() could write more bytes to the user buffer than requested, when a user provides a buffer smaller than the event header size (8 bytes). Fix by using min_t() to clamp the copy size, This ensures we never copy more than the user requested.

VendorProductVersions

Linux

Linux

affected
634ec0b2906efd46f6f57977e172aa3470aca432 - < 16620f0617400746984362c3d6ac547eeae1d35f
affected
634ec0b2906efd46f6f57977e172aa3470aca432 - < ddd32ec66bc4eb6969fe835e4cc1c0706c6348fe
affected
634ec0b2906efd46f6f57977e172aa3470aca432 - < 6275fd726d53a8ec724f20201cf3bd862711e17b
affected
634ec0b2906efd46f6f57977e172aa3470aca432 - < 161291bac551821bba98eb4ea84c82338578d1b0
affected
634ec0b2906efd46f6f57977e172aa3470aca432 - < cdda0d06f8650e33255f79839f188bbece44117c

+1 more versions

Linux

Linux

affected
5.16
unaffected
0 - < 5.16
unaffected
6.1.160 - <= 6.1.*
unaffected
6.6.120 - <= 6.6.*
unaffected
6.12.63 - <= 6.12.*

+3 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now