Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2025-68777

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
13/01/2026
Última modificación:
19/01/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> Input: ti_am335x_tsc - fix off-by-one error in wire_order validation<br /> <br /> The current validation &amp;#39;wire_order[i] &gt; ARRAY_SIZE(config_pins)&amp;#39; allows<br /> wire_order[i] to equal ARRAY_SIZE(config_pins), which causes out-of-bounds<br /> access when used as index in &amp;#39;config_pins[wire_order[i]]&amp;#39;.<br /> <br /> Since config_pins has 4 elements (indices 0-3), the valid range for<br /> wire_order should be 0-3. Fix the off-by-one error by using &gt;= instead<br /> of &gt; in the validation check.

Impacto