CVE-2025-68344

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An integer overflow issue exists in the wavefront send sample() function when validating sample size within the ALSA subsystem. The header->size field, which is a u32 type, is cast to an int type for comparison with dev->freemem, leading to a potential integer overflow. The issue is addressed by using an unsigned comparison to prevent the overflow.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.