CVE-2025-68352

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Linux kernel related to out-of-bounds memory access within the ch341 transfer one function of the SPI CH341 driver. The len variable calculation includes a command header, leading to potential reads from and writes to memory locations outside the intended buffers. Specifically, the calculation min(32, trans->len + 1) can cause an out-of-bounds read from trans->tx buf and an out-of-bounds write to ch341->tx buf when len equals CH341 PACKET LENGTH (32). The vulnerable code copies data using len as the length, which is incorrect.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.