Review reviewHigh

CVE-2025-68347

Linux

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events The DSP event handling code in hwdep_read() could write more bytes to the user buffer than requested, when a user provides a buffer smaller than the event header size (8 bytes). Fix by using min_t() to clamp the copy size, This ensures we never copy more than the user requested.

CVSS: 7.8
EPSS: 0.15%
CISA KEV: Not listed
Published: 2025.12.24

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.15%

Technical severityCVSS 7.8

Vulnerability overview

Affected product and versions

Product: Linux
Affected versions: >= 634ec0b2906efd46f6f57977e172aa3470aca432 < 16620f0617400746984362c3d6ac547eeae1d35f, >= 634ec0b2906efd46f6f57977e172aa3470aca432 < ddd32ec66bc4eb6969fe835e4cc1c0706c6348fe, >= 634ec0b2906efd46f6f57977e172aa3470aca432 < 6275fd726d53a8ec724f20201cf3bd862711e17b, >= 634ec0b2906efd46f6f57977e172aa3470aca432 < 161291bac551821bba98eb4ea84c82338578d1b0, >= 634ec0b2906efd46f6f57977e172aa3470aca432 < cdda0d06f8650e33255f79839f188bbece44117c, >= 634ec0b2906efd46f6f57977e172aa3470aca432 < 210d77cca3d0494ed30a5c628b20c1d95fa04fb1, >= 5.16
Fixed versions: No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: Not available