In the Linux kernel, the following vulnerability has been resolved:
ALSA: dice: fix buffer overflow in detectstreamformats()
The function detectstreamformats() reads the streamcount value directly from a FireWire device without validating it. This can lead to out-of-bounds writes when a malicious device provides a streamcount value greater than MAX_STREAMS.
Fix by applying the same validation to both TX and RX stream counts in detectstreamformats().
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68346.json",
"cna_assigner": "Linux"
}