Vulnerability in Linux

CVE-2025-68281

In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: bug fix while parsing mipi-sdca-control-cn-list "struct sdca_control" declares "values" field as integer array. But the memory allocated to it is of char array. This causes crash for sdca_parse_function API. This patch addresses the issue by allocating correct data size.

EPSS: 0.002 (4.7th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 50a479527ef01f9b36dde1803a7e81741a222509, 6.17, 0

References