CVE-2025-68753
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
05/01/2026
Last modified:
05/01/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
ALSA: firewire-motu: add bounds check in put_user loop for DSP events<br />
<br />
In the DSP event handling code, a put_user() loop copies event data.<br />
When the user buffer size is not aligned to 4 bytes, it could overwrite<br />
beyond the buffer boundary.<br />
<br />
Fix by adding a bounds check before put_user().