PT-2025-52888 · Linux+3 · Linux Kernel+3
Publicado
2025-11-28
·
Atualizado
2026-04-06
·
CVE-2025-68352
CVSS v2.0
7.7
Alta
| Vetor | AV:A/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
An issue exists in the Linux kernel related to out-of-bounds memory access within the
ch341 transfer one function of the SPI CH341 driver. The len variable calculation includes a command header, leading to potential reads from and writes to memory locations outside the intended buffers. Specifically, the calculation min(32, trans->len + 1) can cause an out-of-bounds read from trans->tx buf and an out-of-bounds write to ch341->tx buf when len equals CH341 PACKET LENGTH (32). The vulnerable code copies data using len as the length, which is incorrect.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Debian
Linuxmint
Linux Kernel
Ubuntu