CVE-2025-68777

Source
https://cve.org/CVERecord?id=CVE-2025-68777
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-68777.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-68777
Downstream
Related
Published
2026-01-13T15:28:53.416Z
Modified
2026-03-20T12:46:28.718053Z
Summary
Input: ti_am335x_tsc - fix off-by-one error in wire_order validation
Details

In the Linux kernel, the following vulnerability has been resolved:

Input: tiam335xtsc - fix off-by-one error in wire_order validation

The current validation 'wireorder[i] > ARRAYSIZE(configpins)' allows wireorder[i] to equal ARRAYSIZE(configpins), which causes out-of-bounds access when used as index in 'configpins[wireorder[i]]'.

Since configpins has 4 elements (indices 0-3), the valid range for wireorder should be 0-3. Fix the off-by-one error by using >= instead of > in the validation check.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68777.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
bb76dc09ddfc135c6c5e8eb7d3c583bfa8bdd439
Fixed
a7ff2360431561b56f559d3a628d1f096048d178
Fixed
136abe173a3cc2951d70c6e51fe7abdbadbb204b
Fixed
08c0b561823a7026364efb38ed7f4a3af48ccfcd
Fixed
bf95ec55805828c4f2b5241fb6b0c12388548570
Fixed
84e4d3543168912549271b34261f5e0f94952d6e
Fixed
40e3042de43ffa0017a8460ff9b4cad7b8c7cb96
Fixed
248d3a73a0167dce15ba100477c3e778c4787178

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-68777.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.11.0
Fixed
5.10.248
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.198
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.160
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.120
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.64
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.3

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-68777.json"