CVE-2025-68352

A flaw was found in the Linux kernel's spi-ch341 driver. An incorrect length calculation during data transfer can lead to an out-of-bounds read, potentially disclosing sensitive information, and an out-of-bounds write, which could corrupt data. A local attacker with low privileges could exploit this vulnerability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.