CVE-2025-68346

ALSA: dice: fix buffer overflow in detect_stream_formats()

State: Published
Severity: Not scored
Published: Dec 24, 2025
Updated: May 11, 2026
Reserved: Dec 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: dice: fix buffer overflow in detect_stream_formats()

The function detect_stream_formats() reads the stream_count value directly from a FireWire device without validating it. This can lead to out-of-bounds writes when a malicious device provides a stream_count value greater than MAX_STREAMS.

Fix by applying the same validation to both TX and RX stream counts in detect_stream_formats().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	58579c056c1c9510ae6695ed8e01ee05bbdcfb23 to before d6280a5b00cad37d9a9a875849e5bf7ed2fe4950Affected 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 to before 3cf854cec0eb371da47ff5fe56eab189d7fa623aAffected 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 to before 4a6ab0f6cc9bdfdfecbf257a46ff4275bd965af4Affected 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 to before dea3ed2c16f99f46f97b1a090bf80ecdd6972ce0Affected 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 to before c0a1fe1902ad23e6d48e0f68be1258ccf7a163e6Affected 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 to before 932aa1e80b022419cf9710e970739b7a8794f27cAffected 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 to before 1e1b3207a53e50d5a66289fffc1f7d52cd9c50f9Affected 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 to before 324f3e03e8a85931ce0880654e3c3eb38b0f0bbaAffected
LinuxLinux	4.18Affected before 4.18Not affected 5.10.248 through 5.10.Not affected 5.15.198 through 5.15.Not affected 6.1.160 through 6.1.Not affected 6.6.120 through 6.6.Not affected 6.12.63 through 6.12.Not affected 6.17.13 through 6.17.Not affected 6.18.2 through 6.18.*Not affected 6.19 and laterNot affected

Product

Versions

LinuxLinux

58579c056c1c9510ae6695ed8e01ee05bbdcfb23 to before d6280a5b00cad37d9a9a875849e5bf7ed2fe4950Affected
58579c056c1c9510ae6695ed8e01ee05bbdcfb23 to before 3cf854cec0eb371da47ff5fe56eab189d7fa623aAffected
58579c056c1c9510ae6695ed8e01ee05bbdcfb23 to before 4a6ab0f6cc9bdfdfecbf257a46ff4275bd965af4Affected
58579c056c1c9510ae6695ed8e01ee05bbdcfb23 to before dea3ed2c16f99f46f97b1a090bf80ecdd6972ce0Affected
58579c056c1c9510ae6695ed8e01ee05bbdcfb23 to before c0a1fe1902ad23e6d48e0f68be1258ccf7a163e6Affected
58579c056c1c9510ae6695ed8e01ee05bbdcfb23 to before 932aa1e80b022419cf9710e970739b7a8794f27cAffected
58579c056c1c9510ae6695ed8e01ee05bbdcfb23 to before 1e1b3207a53e50d5a66289fffc1f7d52cd9c50f9Affected
58579c056c1c9510ae6695ed8e01ee05bbdcfb23 to before 324f3e03e8a85931ce0880654e3c3eb38b0f0bbaAffected

LinuxLinux

4.18Affected
before 4.18Not affected
5.10.248 through 5.10.*Not affected
5.15.198 through 5.15.*Not affected
6.1.160 through 6.1.*Not affected
6.6.120 through 6.6.*Not affected
6.12.63 through 6.12.*Not affected
6.17.13 through 6.17.*Not affected
6.18.2 through 6.18.*Not affected
6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.