CVE-2025-68753: linux Out-of-bounds Write
Vulnerability summary
CVE-2025-68753 is a high (CVSS 7.1) Out-of-bounds Write vulnerability in linux. EPSS estimates a 0.14% chance of exploitation in the next 30 days, higher than 3% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 36 · Related 35Timeline
- 05-01-2026PublishedVulnerability first disclosed.
- 19-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: add bounds check in put_user loop for DSP events In the DSP event handling code, a put_user() loop copies event data. When the user buffer size is not aligned to 4 bytes, it could overwrite beyond the buffer boundary. Fix by adding a bounds check before put_user().
CVSS metrics
4 scores · 4 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated7.1HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.1HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
- NVDNIST7.1HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
EPSS trend
Probability
0.14%
Chance of exploitation in the next 30 days
Percentile
3%
Versus all other CVEs
30-day change
0.00 pp
From 0.14% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu130 products
- linux< 6.8.0-110.110 | < 6.17.0-19.19
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 6.8.0-1052.55 | < 6.17.0-1009.9
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian1 product
- linux< 6.1.162-1 | < 6.12.63-1 | < 6.17.13-1
Linux1 product
- linux≥ 634ec0b2906efd46f6f57977e172aa3470aca432, < ea2c921d9de6e32ca50cb817b9d57bb881be70de | ≥ 634ec0b2906efd46f6f57977e172aa3470aca432, < 6d4f17782ce4facf3197e79707df411ee3d7b30a | ≥ 634ec0b2906efd46f6f57977e172aa3470aca432, < 0d71b3c2ed742f1ccb3b0b7a61afb90c0251093f | ≥ 634ec0b2906efd46f6f57977e172aa3470aca432, < df692cf2b601a54b34edfdb9e683d67483aa8ce1 | ≥ 634ec0b2906efd46f6f57977e172aa3470aca432, < 8f9e51cf2a2a43d0cd72d3dc0b5ccea3f639c187 | ≥ 634ec0b2906efd46f6f57977e172aa3470aca432, < 298e753880b6ea99ac30df34959a7a03b0878eed | 5.16
3 vendors · 132 products