CVE-2025-68346
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
24/12/2025
Última modificación:
29/12/2025
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
ALSA: dice: fix buffer overflow in detect_stream_formats()<br />
<br />
The function detect_stream_formats() reads the stream_count value directly<br />
from a FireWire device without validating it. This can lead to<br />
out-of-bounds writes when a malicious device provides a stream_count value<br />
greater than MAX_STREAMS.<br />
<br />
Fix by applying the same validation to both TX and RX stream counts in<br />
detect_stream_formats().