CVE-2025-68819: media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()
In the Linux kernel, the following vulnerability has been resolved:
media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100i2cmsg()
rlen value is a user-controlled value, but dtv5100i2cmsg() does not check the size of the rlen value. Therefore, if it is set to a value larger than sizeof(st->data), an out-of-bounds vuln occurs for st->data.
Therefore, we need to add proper range checking to prevent this vuln.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Compensating control
Add range checking in dtv5100_i2c_msg() so user-controlled rlen values larger than sizeof(st->data) are rejected before accessing st->data.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68819?
CVE-2025-68819 is considered to be a high severity vulnerability due to its potential for exposing sensitive system information through an out-of-bounds read.
How do I fix CVE-2025-68819?
To fix CVE-2025-68819, you should update your Linux kernel to a version that includes the patch addressing this vulnerability.
What impact does CVE-2025-68819 have on affected systems?
CVE-2025-68819 can lead to arbitrary memory read operations, which may allow an attacker to gain access to sensitive data.
Is CVE-2025-68819 exploitable remotely?
CVE-2025-68819 is not classified as a remote exploit since it requires local access to manipulate the user-controlled rlen value.
Which versions of the Linux kernel are affected by CVE-2025-68819?
CVE-2025-68819 affects certain versions of the Linux kernel that include the dvb-usb dtv5100 driver affected by the out-of-bounds issue.