firewire motu

The Linux kernel has been assigned CVE-2025-68753 for a vulnerability in the ALSA firewire-motu driver where a flawed copy loop using put_user could write beyond a user buffer when the buffer size is not aligned to 4 bytes; upstream developers patched the driver by adding a bounds check and...

The Linux kernel received a focused fix for a small but consequential memory‑handling bug in the ALSA firewire-motu driver that could let the driver write more bytes to userspace than requested during DSP event handling — tracked as CVE-2025-68347 and remedied upstream by clamping copy length...