CVE-2025-68346
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: dice: fix buffer overflow in detect_stream_formats() The function detect_stream_formats() reads the stream_count value directly from a FireWire device without validating it. This can lead to out-of-bounds writes when a malicious device provides a stream_count value greater than MAX_STREAMS. Fix by applying the same validation to both TX and RX stream counts in detect_stream_formats().
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedDec 24, 2025
First seenDec 24, 2025
How to fix
Update
- Linux Linuxd6280a5b00cad37d9a9a875849e5bf7ed2fe4950, 3cf854cec0eb371da47ff5fe56eab189d7fa623a, 4a6ab0f6cc9bdfdfecbf257a46ff4275bd965af4, dea3ed2c16f99f46f97b1a090bf80ecdd6972ce0, c0a1fe1902ad23e6d48e0f68be1258ccf7a163e6, 932aa1e80b022419cf9710e970739b7a8794f27c, 1e1b3207a53e50d5a66289fffc1f7d52cd9c50f9, 324f3e03e8a85931ce0880654e3c3eb38b0f0bba or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 ≤ v < d6280a5b00cad37d9a9a875849e5bf7ed2fe4950, 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 ≤ v < 3cf854cec0eb371da47ff5fe56eab189d7fa623a, 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 ≤ v < 4a6ab0f6cc9bdfdfecbf257a46ff4275bd965af4, 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 ≤ v < dea3ed2c16f99f46f97b1a090bf80ecdd6972ce0, 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 ≤ v < c0a1fe1902ad23e6d48e0f68be1258ccf7a163e6, 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 ≤ v < 932aa1e80b022419cf9710e970739b7a8794f27c, 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 ≤ v < 1e1b3207a53e50d5a66289fffc1f7d52cd9c50f9, 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 ≤ v < 324f3e03e8a85931ce0880654e3c3eb38b0f0bba, 4.18 | d6280a5b00cad37d9a9a875849e5bf7ed2fe4950, 3cf854cec0eb371da47ff5fe56eab189d7fa623a, 4a6ab0f6cc9bdfdfecbf257a46ff4275bd965af4, dea3ed2c16f99f46f97b1a090bf80ecdd6972ce0, c0a1fe1902ad23e6d48e0f68be1258ccf7a163e6, 932aa1e80b022419cf9710e970739b7a8794f27c, 1e1b3207a53e50d5a66289fffc1f7d52cd9c50f9, 324f3e03e8a85931ce0880654e3c3eb38b0f0bba |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.