Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-68819

media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() rlen value is a user-controlled value, but dtv5100_i2c_msg() does not check the size of the rlen value. Therefore, if it is set to a value larger than sizeof(st->data), an out-of-bounds vuln occurs for st->data. Therefore, we need to add proper range checking to prevent this vuln.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 to < c2c293ea7b61f12cdaad1e99a5b4efc58c88960aaffected
  • 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 to < c2305b4c5fc15e20ac06c35738e0578eb4323750affected
  • 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 to < 61f214a878e96e2a8750bf96a98f78c658dba60caffected
  • 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 to < 4a54d8fcb093761e4c56eb211cf4e39bf8401fa1affected
  • 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 to < fe3e129ab49806aaaa3f22067ebc75c2dfbe4658affected
  • 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 to < ac92151ff2494130d9fc686055d6bbb9743a673eaffected
  • 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 to < b91e6aafe8d356086cc621bc03e35ba2299e4788affected

Linux Linux

Default version status: affected

  • 2.6.28affected
  • 0 to < 2.6.28unaffected
  • 5.10.248 to ≤ 5.10.*unaffected
  • 5.15.198 to ≤ 5.15.*unaffected
  • 6.1.160 to ≤ 6.1.*unaffected
  • 6.6.120 to ≤ 6.6.*unaffected
  • 6.12.64 to ≤ 6.12.*unaffected
  • 6.18.3 to ≤ 6.18.*unaffected
  • 6.19 to ≤ *unaffected

References