Not yet scoredPublished Dec 24, 2025

CVE-2025-68346ALSA: dice: fix buffer overflow in detect_stream_formats()

Updated under an hour ago (Oct 26, 2026, 9:50 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ALSA: dice: fix buffer overflow in detect_stream_formats() The function detect_stream_formats() reads the stream_count value directly from a FireWire device without validating it. This can lead to out-of-bounds writes when a malicious device provides a stream_count value greater than MAX_STREAMS. Fix by applying the same validation to both TX and RX stream counts in detect_stream_formats().

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 before d6280a5b00cad37d9a9a875849e5bf7ed2fe4950; 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 builds before 3cf854cec0eb371da47ff5fe56eab189d7fa623a; 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 builds before 4a6ab0f6cc9bdfdfecbf257a46ff4275bd965af4; from 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 before dea3ed2c16f99f46f97b1a090bf80ecdd6972ce0; from 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 before c0a1fe1902ad23e6d48e0f68be1258ccf7a163e6; 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 builds before 932aa1e80b022419cf9710e970739b7a8794f27c; 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 builds before 1e1b3207a53e50d5a66289fffc1f7d52cd9c50f9; 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 builds before 324f3e03e8a85931ce0880654e3c3eb38b0f0bba	CNA record

References

References

https://git.kernel.org/stable/c/d6280a5b00cad37d9a9a875849e5bf7ed2fe4950
https://git.kernel.org/stable/c/3cf854cec0eb371da47ff5fe56eab189d7fa623a
https://git.kernel.org/stable/c/4a6ab0f6cc9bdfdfecbf257a46ff4275bd965af4
https://git.kernel.org/stable/c/dea3ed2c16f99f46f97b1a090bf80ecdd6972ce0
https://git.kernel.org/stable/c/c0a1fe1902ad23e6d48e0f68be1258ccf7a163e6
https://git.kernel.org/stable/c/932aa1e80b022419cf9710e970739b7a8794f27c
https://git.kernel.org/stable/c/1e1b3207a53e50d5a66289fffc1f7d52cd9c50f9
https://git.kernel.org/stable/c/324f3e03e8a85931ce0880654e3c3eb38b0f0bba

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.