Skip to main content

Linux Kernel CVE-2025-68753

HIGH
2026-01-05 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Information Disclosure Linux Red Hat Suse
High
Disputed · 7.1 Vendor: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Share

Severity by source

Sources disagree (Low–High)
Vendor (416baaa9-dc9f-4396-8d5f-8c081fb06d67) PRIMARY
7.1 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
vuln.today AI
4.4 MEDIUM

Local low-priv trigger (AV:L/PR:L); the OOB write corrupts only the calling process's own userspace buffer, so C:N and integrity/availability impact is limited (I:L/A:L).

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
SUSE
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Red Hat
5.5 LOW
qualitative

vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.

CVSS VectorVendor: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
High

Lifecycle Timeline

7
Analysis Updated
Jul 30, 2026 - 07:36 vuln.today
v3 (cvss_changed)
Analysis Updated
Jul 30, 2026 - 07:35 vuln.today
v2 (cvss_changed)
Re-analysis Queued
Jul 30, 2026 - 06:37 vuln.today
cvss_changed
CVSS changed
Jul 30, 2026 - 06:37 NVD
7.1 (HIGH)
Patch released
Mar 16, 2026 - 15:00 nvd
Patch available
Analysis Generated
Mar 12, 2026 - 21:54 vuln.today
CVE Published
Jan 05, 2026 - 10:15 nvd
N/A

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

ALSA: firewire-motu: add bounds check in put_user loop for DSP events

In the DSP event handling code, a put_user() loop copies event data. When the user buffer size is not aligned to 4 bytes, it could overwrite beyond the buffer boundary.

Fix by adding a bounds check before put_user().

AnalysisAI

Out-of-bounds write in the Linux kernel's ALSA firewire-motu driver (snd-firewire-motu) allows a local process reading DSP events to trigger a kernel put_user() copy past the end of its supplied buffer when that buffer's size is not a multiple of 4 bytes. The flaw affects systems with a MOTU FireWire audio interface driver loaded and requires local low-privileged access; it is fixed in stable kernel releases and shipped in Ubuntu USN-8094-1. EPSS is very low (0.05%, 16th percentile), there is no public exploit identified at time of analysis, and it is not listed in CISA KEV.

Technical ContextAI

The bug lives in the FireWire MOTU audio driver, part of ALSA's IEEE 1394/FireWire sound subsystem that streams control and DSP metering ('DSP event') data to userspace. When userspace reads DSP events, the kernel iterates a put_user() loop to copy 4-byte event words into the caller-supplied buffer. Because the loop did not validate the remaining space against the actual buffer length, a buffer size that is not 4-byte aligned lets the final write cross the buffer boundary - an out-of-bounds write (CWE-787 class; the input lists CWE as N/A). The fix adds an explicit bounds check before each put_user() so copying stops at the true buffer limit.

Affected ProductsAI

Affected component is the Linux kernel ALSA firewire-motu (snd-firewire-motu) driver across multiple stable branches; specific vulnerable version ranges are not enumerated in the input beyond the six stable git commits referenced (git.kernel.org/stable/c/0d71b3c..., 298e7538..., 6d4f1778..., 8f9e51cf..., df692cf2..., ea2c921d...), which indicate backports to several maintained stable series. Canonical has published a fixed build via Ubuntu Security Notice USN-8094-1 (https://ubuntu.com/security/notices/USN-8094-1). No CPE strings were provided in the input, so exact kernel version boundaries should be confirmed against each distribution's advisory.

RemediationAI

Patch available per vendor advisory: apply the fixed Linux kernel package for your distribution and reboot - Ubuntu users should install the update from USN-8094-1 (https://ubuntu.com/security/notices/USN-8094-1); upstream the fix is delivered by the stable commits listed at git.kernel.org (e.g. https://git.kernel.org/stable/c/ea2c921d9de6e32ca50cb817b9d57bb881be70de and the five sibling commits), so track the corresponding tagged stable release for your kernel series. As a compensating control where patching must be deferred, prevent the vulnerable code path from loading by blacklisting the snd-firewire-motu module (add it to /etc/modprobe.d and preventing autoload); the side effect is that MOTU FireWire audio interfaces will no longer function, which is acceptable only on systems that do not use such hardware. Restricting local access to trusted users also reduces exposure given the local, low-privilege attack requirement.

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
Container suse/sl-micro/6.0/baremetal-os-container:latest Affected
Container suse/sl-micro/6.0/base-os-container:2.1.3-7.95 Image SL-Micro Affected
Container suse/sl-micro/6.0/kvm-os-container:2.1.3-6.115 Affected
Container suse/sl-micro/6.0/rt-os-container:2.1.3-7.146 Affected
Container suse/sl-micro/6.0/toolbox:latest Affected

Share

CVE-2025-68753 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy