CVE-2025-68347
High
Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events The DSP event handling code in hwdep_read() could write more bytes to the user buffer than requested, when a user provides a buffer smaller than the event header size (8 bytes). Fix by using min_t() to clamp the copy size, This ensures we never copy more than the user requested.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux
PublishedDec 24, 2025
First seenDec 24, 2025
How to fix
Update
- Linux Linux16620f0617400746984362c3d6ac547eeae1d35f, ddd32ec66bc4eb6969fe835e4cc1c0706c6348fe, 6275fd726d53a8ec724f20201cf3bd862711e17b, 161291bac551821bba98eb4ea84c82338578d1b0, cdda0d06f8650e33255f79839f188bbece44117c, 210d77cca3d0494ed30a5c628b20c1d95fa04fb1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 634ec0b2906efd46f6f57977e172aa3470aca432 ≤ v < 16620f0617400746984362c3d6ac547eeae1d35f, 634ec0b2906efd46f6f57977e172aa3470aca432 ≤ v < ddd32ec66bc4eb6969fe835e4cc1c0706c6348fe, 634ec0b2906efd46f6f57977e172aa3470aca432 ≤ v < 6275fd726d53a8ec724f20201cf3bd862711e17b, 634ec0b2906efd46f6f57977e172aa3470aca432 ≤ v < 161291bac551821bba98eb4ea84c82338578d1b0, 634ec0b2906efd46f6f57977e172aa3470aca432 ≤ v < cdda0d06f8650e33255f79839f188bbece44117c, 634ec0b2906efd46f6f57977e172aa3470aca432 ≤ v < 210d77cca3d0494ed30a5c628b20c1d95fa04fb1, 5.16 | 16620f0617400746984362c3d6ac547eeae1d35f, ddd32ec66bc4eb6969fe835e4cc1c0706c6348fe, 6275fd726d53a8ec724f20201cf3bd862711e17b, 161291bac551821bba98eb4ea84c82338578d1b0, cdda0d06f8650e33255f79839f188bbece44117c, 210d77cca3d0494ed30a5c628b20c1d95fa04fb1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.