CVE-2025-68819

Katalog CVE

CVSS 7.8 · High EPSS 0,16%

Skor CVSS 3.1 7.8 (High) menurut CNA.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() rlen value is a user-controlled value, but dtv5100_i2c_msg() does not check the size of the rlen value. Therefore, if it is set to a value larger than sizeof(st->data), an out-of-bounds vuln occurs for st->data. Therefore, we need to add proper range checking to prevent this vuln.

Rincian

Terbit di NVD

13 Januari 2026

Terakhir diubah

30 Juli 2026

Status NVD

Deferred

CVSS 3.1

7.8 (High), sumber CNA
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

0,16% peluang dieksploitasi; lebih tinggi dari 4,1% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/4a54d8fcb093761e4c56eb211cf4e39bf8401fa1
• https://git.kernel.org/stable/c/61f214a878e96e2a8750bf96a98f78c658dba60c
• https://git.kernel.org/stable/c/ac92151ff2494130d9fc686055d6bbb9743a673e
• https://git.kernel.org/stable/c/b91e6aafe8d356086cc621bc03e35ba2299e4788
• https://git.kernel.org/stable/c/c2305b4c5fc15e20ac06c35738e0578eb4323750
• https://git.kernel.org/stable/c/c2c293ea7b61f12cdaad1e99a5b4efc58c88960a
• https://git.kernel.org/stable/c/fe3e129ab49806aaaa3f22067ebc75c2dfbe4658