CVE-2025-68753

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: add bounds check in put_user loop for DSP events In the DSP event handling code, a put_user() loop copies event data. When the user buffer size is not aligned to 4 bytes, it could overwrite beyond the buffer boundary. Fix by adding a bounds check before put_user().

CVSS v3 7.1 HIGH

7.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/0d71b3c2ed742f1ccb3b0b7a61afb90c0251093f
https://git.kernel.org/stable/c/298e753880b6ea99ac30df34959a7a03b0878eed
https://git.kernel.org/stable/c/6d4f17782ce4facf3197e79707df411ee3d7b30a
https://git.kernel.org/stable/c/8f9e51cf2a2a43d0cd72d3dc0b5ccea3f639c187
https://git.kernel.org/stable/c/df692cf2b601a54b34edfdb9e683d67483aa8ce1
https://git.kernel.org/stable/c/ea2c921d9de6e32ca50cb817b9d57bb881be70de

Configurations

No configuration.

History

19 Oct 2026, 19:17

Type	Values Removed	Values Added
CWE		CWE-787

14 Oct 2026, 19:10

Type	Values Removed	Values Added
Summary		(es) En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: ALSA: firewire-motu: añadir comprobación de límites en el bucle put_user para eventos DSP En el código de manejo de eventos DSP, un bucle put_user() copia datos de eventos. Cuando el tamaño del búfer de usuario no está alineado a 4 bytes, podría sobrescribir más allá del límite del búfer. Solución añadiendo una comprobación de límites antes de put_user().

Information

Published : 2026-01-05 10:15

Updated : 2026-10-19 19:17

NVD link : CVE-2025-68753

Mitre link : CVE-2025-68753

CVE.ORG link : CVE-2025-68753

JSON object : View

Products Affected

No product.

CWE

CWE-787

Out-of-bounds Write

{"id": "CVE-2025-68753", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-68753", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-16T15:05:07.065721Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.1, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 5.2, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "634ec0b2906efd46f6f57977e172aa3470aca432", "lessThan": "ea2c921d9de6e32ca50cb817b9d57bb881be70de", "versionType": "git"}, {"status": "affected", "version": "634ec0b2906efd46f6f57977e172aa3470aca432", "lessThan": "6d4f17782ce4facf3197e79707df411ee3d7b30a", "versionType": "git"}, {"status": "affected", "version": "634ec0b2906efd46f6f57977e172aa3470aca432", "lessThan": "0d71b3c2ed742f1ccb3b0b7a61afb90c0251093f", "versionType": "git"}, {"status": "affected", "version": "634ec0b2906efd46f6f57977e172aa3470aca432", "lessThan": "df692cf2b601a54b34edfdb9e683d67483aa8ce1", "versionType": "git"}, {"status": "affected", "version": "634ec0b2906efd46f6f57977e172aa3470aca432", "lessThan": "8f9e51cf2a2a43d0cd72d3dc0b5ccea3f639c187", "versionType": "git"}, {"status": "affected", "version": "634ec0b2906efd46f6f57977e172aa3470aca432", "lessThan": "298e753880b6ea99ac30df34959a7a03b0878eed", "versionType": "git"}], "programFiles": ["sound/firewire/motu/motu-hwdep.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.16"}, {"status": "unaffected", "version": "0", "lessThan": "5.16", "versionType": "semver"}, {"status": "unaffected", "version": "6.1.160", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.120", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.63", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.17.13", "versionType": "semver", "lessThanOrEqual": "6.17.*"}, {"status": "unaffected", "version": "6.18.2", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "6.19", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["sound/firewire/motu/motu-hwdep.c"], "defaultStatus": "affected"}]}], "published": "2026-01-05T10:15:56.310", "references": [{"url": "https://git.kernel.org/stable/c/0d71b3c2ed742f1ccb3b0b7a61afb90c0251093f", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/298e753880b6ea99ac30df34959a7a03b0878eed", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/6d4f17782ce4facf3197e79707df411ee3d7b30a", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/8f9e51cf2a2a43d0cd72d3dc0b5ccea3f639c187", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/df692cf2b601a54b34edfdb9e683d67483aa8ce1", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/ea2c921d9de6e32ca50cb817b9d57bb881be70de", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: firewire-motu: add bounds check in put_user loop for DSP events\n\nIn the DSP event handling code, a put_user() loop copies event data.\nWhen the user buffer size is not aligned to 4 bytes, it could overwrite\nbeyond the buffer boundary.\n\nFix by adding a bounds check before put_user()."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nALSA: firewire-motu: a\u00f1adir comprobaci\u00f3n de l\u00edmites en el bucle put_user para eventos DSP\n\nEn el c\u00f3digo de manejo de eventos DSP, un bucle put_user() copia datos de eventos.\nCuando el tama\u00f1o del b\u00fafer de usuario no est\u00e1 alineado a 4 bytes, podr\u00eda sobrescribir\nm\u00e1s all\u00e1 del l\u00edmite del b\u00fafer.\n\nSoluci\u00f3n a\u00f1adiendo una comprobaci\u00f3n de l\u00edmites antes de put_user()."}], "lastModified": "2026-10-19T19:17:04.003", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}