CVE-2025-68819

In the Linux kernel, the following vulnerability has been resolved:

media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()

rlen value is a user-controlled value, but dtv5100_i2c_msg() does not check the size of the rlen value. Therefore, if it is set to a value larger than sizeof(st->data), an out-of-bounds vuln occurs for st->data.

Therefore, we need to add proper range checking to prevent this vuln.

This vulnerability is rated Moderate because exploitation requires local access and the presence of uncommon DTV5100 USB digital television tuner hardware, limiting its real-world blast radius in enterprise environments. A local attacker with permissions to interact with the device interface, or physical access to insert an emulated USB device, could submit a crafted message length to cause an out-of-bounds memory write in the kernel. This memory corruption primarily results in a denial of service through a system crash, while systems without this specialized media hardware attached are not exposed.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.