CVE-2025-68344: ALSA: wavefront: Fix integer overflow in sample size validation
In the Linux kernel, the following vulnerability has been resolved:
ALSA: wavefront: Fix integer overflow in sample size validation
The wavefrontsendsample() function has an integer overflow issue when validating sample size. The header->size field is u32 but gets cast to int for comparison with dev->freemem
Fix by using unsigned comparison to avoid integer overflow.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68344?
CVE-2025-68344 has been classified with a severity level that indicates potential high risk due to the integer overflow vulnerability.
How do I fix CVE-2025-68344?
To fix CVE-2025-68344, update the Linux kernel to the latest version that includes the patch addressing the integer overflow issue.
What systems are affected by CVE-2025-68344?
CVE-2025-68344 affects systems running the azl3 kernel version 6.6.117.1-1.
What type of vulnerability is CVE-2025-68344?
CVE-2025-68344 is classified as an integer overflow vulnerability within the ALSA wavefront component of the Linux kernel.
What is the impact of CVE-2025-68344?
The impact of CVE-2025-68344 can lead to crashes or unexpected behavior in applications that rely on the wavefront_send_sample() function.