CVE-2025-68346

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ALSA: dice: fix buffer overflow in detect_stream_formats()<br /> <br /> The function detect_stream_formats() reads the stream_count value directly<br /> from a FireWire device without validating it. This can lead to<br /> out-of-bounds writes when a malicious device provides a stream_count value<br /> greater than MAX_STREAMS.<br /> <br /> Fix by applying the same validation to both TX and RX stream counts in<br /> detect_stream_formats().