CVE-2025-68347

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified) Windows (affected versions not specified)

Description A flaw exists in the Linux kernel related to ALSA and firewire-motu, specifically a buffer overflow in the hwdep read() function when handling DSP events. The issue occurs when a user provides a buffer smaller than the event header size (8 bytes), potentially allowing more bytes to be written to the user buffer than requested. The problem is addressed by clamping the copy size using min t(). A separate issue enables unauthenticated SYSTEM-level Remote Code Execution (RCE) in Windows.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.