CVE-2025-68346

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The detect stream formats() function in the ALSA driver for Digital Interface Communication Engine (dice) devices does not validate the stream count value received from a FireWire device. A malicious device providing a stream count value exceeding MAX STREAMS can trigger out-of-bounds writes. The issue is addressed by adding validation to both transmit (TX) and receive (RX) stream counts within the detect stream formats() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.