CVE-2025-68347

ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events

State: Published
Severity: 7.8 High
Published: Dec 24, 2025
Updated: Oct 16, 2026
Reserved: Dec 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events

The DSP event handling code in hwdep_read() could write more bytes to the user buffer than requested, when a user provides a buffer smaller than the event header size (8 bytes).

Fix by using min_t() to clamp the copy size, This ensures we never copy more than the user requested.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	634ec0b2906efd46f6f57977e172aa3470aca432 to before 16620f0617400746984362c3d6ac547eeae1d35fAffected 634ec0b2906efd46f6f57977e172aa3470aca432 to before ddd32ec66bc4eb6969fe835e4cc1c0706c6348feAffected 634ec0b2906efd46f6f57977e172aa3470aca432 to before 6275fd726d53a8ec724f20201cf3bd862711e17bAffected 634ec0b2906efd46f6f57977e172aa3470aca432 to before 161291bac551821bba98eb4ea84c82338578d1b0Affected 634ec0b2906efd46f6f57977e172aa3470aca432 to before cdda0d06f8650e33255f79839f188bbece44117cAffected 634ec0b2906efd46f6f57977e172aa3470aca432 to before 210d77cca3d0494ed30a5c628b20c1d95fa04fb1Affected
LinuxLinux	5.16Affected before 5.16Not affected 6.1.160 through 6.1.Not affected 6.6.120 through 6.6.Not affected 6.12.63 through 6.12.Not affected 6.17.13 through 6.17.Not affected 6.18.2 through 6.18.*Not affected 6.19 and laterNot affected

Product

Versions

LinuxLinux

634ec0b2906efd46f6f57977e172aa3470aca432 to before 16620f0617400746984362c3d6ac547eeae1d35fAffected
634ec0b2906efd46f6f57977e172aa3470aca432 to before ddd32ec66bc4eb6969fe835e4cc1c0706c6348feAffected
634ec0b2906efd46f6f57977e172aa3470aca432 to before 6275fd726d53a8ec724f20201cf3bd862711e17bAffected
634ec0b2906efd46f6f57977e172aa3470aca432 to before 161291bac551821bba98eb4ea84c82338578d1b0Affected
634ec0b2906efd46f6f57977e172aa3470aca432 to before cdda0d06f8650e33255f79839f188bbece44117cAffected
634ec0b2906efd46f6f57977e172aa3470aca432 to before 210d77cca3d0494ed30a5c628b20c1d95fa04fb1Affected

LinuxLinux

5.16Affected
before 5.16Not affected
6.1.160 through 6.1.*Not affected
6.6.120 through 6.6.*Not affected
6.12.63 through 6.12.*Not affected
6.17.13 through 6.17.*Not affected
6.18.2 through 6.18.*Not affected
6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.