CVE-2025-68344

Advisory lineage Upstream: 0 Downstream: 40
Deferred
Published: 24 Dec 2025, 10:32
Last modified:11 May 2026, 21:51

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
0.05% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

24 Dec 2025, 10:32
Published
Vulnerability first disclosed
11 May 2026, 21:51
Last Modified
Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: wavefront: Fix integer overflow in sample size validation The wavefront_send_sample() function has an integer overflow issue when validating sample size. The header->size field is u32 but gets cast to int for comparison with dev->freemem Fix by using unsigned comparison to avoid integer overflow.

EPSS Trends

Current EPSS score: 0.05%• Percentile: 15%

Affected Systems

  • linux•linux

    ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 488bf86d60077f52810c60dbdf7468c277880167 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < d2f5d8cf1eadb7b33e476f59aa9c6653e4f2b937 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 4f811071e702fbb74933526e2fbadf8c4ed0c0c4 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 02b63f3bc29265bd9e83191792d200ed563acacf | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 5588b7c86effffa9bb55383a38800649d7b40778 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < bca11de0a277b8baeb7d006f93b543c907b6e782 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 1823e08f76c68b9e1d26f6d5ef831b96f61a62a0 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 0c4a13ba88594fd4a27292853e736c6b4349823d | 2.6.12

References (8)