CVE-2025-68281

ASoC: SDCA: bug fix while parsing mipi-sdca-control-cn-list

State
Published
Severity
Not scored
Published
Dec 16, 2025
Updated
May 11, 2026
Reserved
Dec 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SDCA: bug fix while parsing mipi-sdca-control-cn-list

"struct sdca_control" declares "values" field as integer array. But the memory allocated to it is of char array. This causes crash for sdca_parse_function API. This patch addresses the issue by allocating correct data size.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 50a479527ef01f9b36dde1803a7e81741a222509 to before fcd5786b506c51cbabc2560c68e040d8dba22a0dAffected
  • 50a479527ef01f9b36dde1803a7e81741a222509 to before eb2d6774cc0d9d6ab8f924825695a85c14b2e0c2Affected
LinuxLinux
  • 6.17Affected
  • before 6.17Not affected
  • 6.17.12 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.