PT-2025-37210
CVE-2025-39751
·
Published
2025-06-10
·
Updated
2026-10-18
Description by
CVSS 3.1
7.0
HighMetricsAV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
A buffer overflow issue was identified in the
add tuning control function within the ALSA subsystem. The sprintf function call could exceed the allocated buffer size of 44 bytes if the input string arguments were excessively long, leading to a potential buffer overflow. This issue was addressed by replacing sprintf with snprintf to limit string lengths and prevent the overflow.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾