cve 2025 68346

CVE-2025-68346 is a buffer overflow vulnerability in the Linux kernel's ALSA dice driver, affecting FireWire (IEEE 1394) audio devices. The flaw exists in the detect_stream_formats function, which fails to validate the stream_count field from a device, allowing out-of-bounds writes when a malicious or malformed device supplies a value larger than MAX_STREAMS. The vulnerability has been fixed upstream by adding symmetrical validation for both TX and RX stream counts. This tag covers discussions about the patch, impact on Linux systems, and related security advisories.