CVE-2025-68346

In the Linux kernel, the following vulnerability has been resolved:

ALSA: dice: fix buffer overflow in detect_stream_formats()

The function detect_stream_formats() reads the stream_count value directly from a FireWire device without validating it. This can lead to out-of-bounds writes when a malicious device provides a stream_count value greater than MAX_STREAMS.

Fix by applying the same validation to both TX and RX stream counts in detect_stream_formats().

This patch fixes a kernel buffer overflow in ALSA FireWire DICE stream format detection by clamping device-provided TX/RX stream_count to MAX_STREAMS. A malicious or buggy FireWire device could otherwise trigger out-of-bounds writes via read_stream_entries(), leading to crashes and potentially memory corruption. The attack surface is physical (device-to-host).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.