PT-2025-37210

CVE-2025-39751

·

Published

2025-06-10

·

Updated

2026-10-18

Description by

CVSS 3.1
7.0
High
MetricsAV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)
Description: A buffer overflow issue was identified in the add tuning control function within the ALSA subsystem. The sprintf function call could exceed the allocated buffer size of 44 bytes if the input string arguments were excessively long, leading to a potential buffer overflow. This issue was addressed by replacing sprintf with snprintf to limit string lengths and prevent the overflow.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Related identifiers
ALSA-2025:18297
ALSA-2025:18298
CESA-2025_18297
CESA-2025_18298
CLSA-2025-1766600619
CLSA-2025-1766617167
CLSA-2026-1777614651
DSA-6009-1
ECHO-0C9F-0513-DAE6
INFSA-2025_18297
INFSA-2025_18298
INFSA-2025_19105
OESA-2025-2764
OESA-2025-2765
OESA-2025-2766
OESA-2025-2767
OESA-2025-2769
OPENSUSE-SU-2025:20081-1
RHSA-2025:18297
RHSA-2025_18297
RHSA-2025:18298
RHSA-2025_18298
RHSA-2025:18932
RHSA-2025:19104
RHSA-2025:19105
RHSA-2025_19105
RHSA-2025:19106
RHSA-2025:19222
RHSA-2025:19223
RHSA-2025:19224
RHSA-2025:19268
RHSA-2025:19492
RHSA-2025:21063
RHSA-2025:21082
RHSA-2025:21118
SUSE-SU-2025:03600-1
SUSE-SU-2025:03613-1
SUSE-SU-2025:03614-1
SUSE-SU-2025:03615-1
SUSE-SU-2025:03626-1
SUSE-SU-2025:03628-1
SUSE-SU-2025:03634-1
SUSE-SU-2025:20851-1
SUSE-SU-2025:20861-1
SUSE-SU-2025:20870-1
SUSE-SU-2025:20898-1
SUSE-SU-2025:21074-1
SUSE-SU-2025:21139-1
SUSE-SU-2025:21179-1
SUSE-SU-2025:3716-1
SUSE-SU-2025:3751-1
SUSE-SU-2025:3761-1
SUSE-SU-2025:4057-1
SUSE-SU-2025:4132-1
SUSE-SU-2025:4141-1
SUSE-SU-2026:20560-1
Found an issue in the description? Have something to add? Feel free to write us 👾