CVE-2025-68347
Published Dec 24, 2025
Modified Apr 15, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events The DSP event handling code in hwdep_read() could write more bytes to the user buffer than requested, when a user provides a buffer smaller than the event header size (8 bytes). Fix by using min_t() to clamp the copy size, This ensures we never copy more than the user requested.
Is your site exposed to CVE-2025-68347?
Run a free security scan — no signup, results in seconds.
References
Other References
https://git.kernel.org/stable/c/161291bac551821bba98eb4ea84c82338578d1b0
https://git.kernel.org/stable/c/16620f0617400746984362c3d6ac547eeae1d35f
https://git.kernel.org/stable/c/210d77cca3d0494ed30a5c628b20c1d95fa04fb1
https://git.kernel.org/stable/c/6275fd726d53a8ec724f20201cf3bd862711e17b
https://git.kernel.org/stable/c/cdda0d06f8650e33255f79839f188bbece44117c
https://git.kernel.org/stable/c/ddd32ec66bc4eb6969fe835e4cc1c0706c6348fe
Frequently Asked Questions
What is CVE-2025-68347? +
In the Linux kernel, the following vulnerability has been resolved:
ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events
The DSP event handling code in hwdep_read() could write more bytes to
the user buffer than requested, when a user provides a buffer smaller
than the event header size (8 bytes).
Fix by using min_t() to clamp the copy size, This ensures we never copy
more than the user requested.
How do I check if I'm vulnerable to CVE-2025-68347? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.