Review reviewHigh

CVE-2025-68753

Linux

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: add bounds check in put_user loop for DSP events In the DSP event handling code, a put_user() loop copies event data. When the user buffer size is not aligned to 4 bytes, it could overwrite beyond the buffer boundary. Fix by adding a bounds check before put_user().

CVSS: 7.1
EPSS: 0.12%
CISA KEV: Not listed
Published: 2026.01.05

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.12%

Technical severityCVSS 7.1

Vulnerability overview

Affected product and versions

Product: Linux
Affected versions: >= 634ec0b2906efd46f6f57977e172aa3470aca432 < ea2c921d9de6e32ca50cb817b9d57bb881be70de, >= 634ec0b2906efd46f6f57977e172aa3470aca432 < 6d4f17782ce4facf3197e79707df411ee3d7b30a, >= 634ec0b2906efd46f6f57977e172aa3470aca432 < 0d71b3c2ed742f1ccb3b0b7a61afb90c0251093f, >= 634ec0b2906efd46f6f57977e172aa3470aca432 < df692cf2b601a54b34edfdb9e683d67483aa8ce1, >= 634ec0b2906efd46f6f57977e172aa3470aca432 < 8f9e51cf2a2a43d0cd72d3dc0b5ccea3f639c187, >= 634ec0b2906efd46f6f57977e172aa3470aca432 < 298e753880b6ea99ac30df34959a7a03b0878eed, >= 5.16
Fixed versions: No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CWE: Not available