CVE-2025-68281
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: bug fix while parsing mipi-sdca-control-cn-list "struct sdca_control" declares "values" field as integer array. But the memory allocated to it is of char array. This causes crash for sdca_parse_function API. This patch addresses the issue by allocating correct data size.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedDec 16, 2025
First seenDec 16, 2025
How to fix
Update
- Linux Linuxfcd5786b506c51cbabc2560c68e040d8dba22a0d, eb2d6774cc0d9d6ab8f924825695a85c14b2e0c2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 50a479527ef01f9b36dde1803a7e81741a222509 ≤ v < fcd5786b506c51cbabc2560c68e040d8dba22a0d, 50a479527ef01f9b36dde1803a7e81741a222509 ≤ v < eb2d6774cc0d9d6ab8f924825695a85c14b2e0c2, 6.17 | fcd5786b506c51cbabc2560c68e040d8dba22a0d, eb2d6774cc0d9d6ab8f924825695a85c14b2e0c2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.