Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2025-68819

media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.10.248, 5.15.198, 6.1.160, 6.6.120, 6.12.64, and 1 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() rlen value is a user-controlled value, but dtv5100_i2c_msg() does not check the size of the rlen value. Therefore, if it is set to a value larger than sizeof(st->data), an out-of-bounds vuln occurs for st->data. Therefore, we need to add proper range checking to prevent this vuln.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • Linux Linux

    From 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 · fixed in c2c293ea7b61f12cdaad1e99a5b4efc58c88960a; From 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 · fixed in c2305b4c5fc15e20ac06c35738e0578eb4323750; From 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 · fixed in 61f214a878e96e2a8750bf96a98f78c658dba60c; From 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 · fixed in 4a54d8fcb093761e4c56eb211cf4e39bf8401fa1; From 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 · fixed in fe3e129ab49806aaaa3f22067ebc75c2dfbe4658; From 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 · fixed in ac92151ff2494130d9fc686055d6bbb9743a673e; From 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 · fixed in b91e6aafe8d356086cc621bc03e35ba2299e4788

  • Linux Linux

    2.6.28

  • KernelLinux

    From 2.6.28 · fixed in 5.10.248; From 5.11.0 · fixed in 5.15.198; From 5.16.0 · fixed in 6.1.160; From 6.2.0 · fixed in 6.6.120; From 6.7.0 · fixed in 6.12.64; From 6.13.0 · fixed in 6.18.3

References 7

git.kernel.org