alsa

The Linux kernel has been assigned CVE-2025-68753 for a vulnerability in the ALSA firewire-motu driver where a flawed copy loop using put_user could write beyond a user buffer when the buffer size is not aligned to 4 bytes; upstream developers patched the driver by adding a bounds check and...

The Linux kernel received a focused fix for a small but consequential memory‑handling bug in the ALSA firewire-motu driver that could let the driver write more bytes to userspace than requested during DSP event handling — tracked as CVE-2025-68347 and remedied upstream by clamping copy length...

A recently assigned CVE, CVE-2025-68345, identifies a NULL-pointer dereference in the ALSA HDA driver for the Cirrus Logic CS35L41 audio amplifier that can crash Linux systems when the driver reads ACPI properties without checking for a missing physical ACPI node — a low-complexity, local...

The Linux kernel's audio stack is showing fresh signs of life across several fronts: a newly submitted, fully featured USB driver for the discontinued but still widely owned TASCAM US-144MKII is queued for the 6.18 cycle; the sound subsystem for Linux 6.17 is being prepared with explicit support...