Strix
26.1K

CVE-2025-68819

HIGHCVSS 7.8/10EPSS 0.17%

Last modified

CVE-2025-68819 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() rlen value is a user-controlled value, but dtv5100_i2c_msg() does not check the size of the rlen value. Therefore, if it is set to a value larger than sizeof(st->data), an out-of-bounds vuln occurs for st->data. Therefore, we need to add proper range checking to prevent this vuln.. EPSS estimates a 0.17% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() rlen value is a user-controlled value, but dtv5100_i2c_msg() does not check the size of the rlen value. Therefore, if it is set to a value larger than sizeof(st->data), an out-of-bounds vuln occurs for st->data. Therefore, we need to add proper range checking to prevent this vuln.

Metrics

CVSS 3.1
7.8/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
0.17%

6.9th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817, < c2c293ea7b61f12cdaad1e99a5b4efc58c88960a; >= 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817, < c2305b4c5fc15e20ac06c35738e0578eb4323750; >= 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817, < 61f214a878e96e2a8750bf96a98f78c658dba60c; >= 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817, < 4a54d8fcb093761e4c56eb211cf4e39bf8401fa1; >= 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817, < fe3e129ab49806aaaa3f22067ebc75c2dfbe4658; >= 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817, < ac92151ff2494130d9fc686055d6bbb9743a673e; >= 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817, < b91e6aafe8d356086cc621bc03e35ba2299e4788
LinuxLinux2.6.28

References

Timeline

Published
Last Modified
Status
Deferred

Frequently Asked Questions

What is CVE-2025-68819?
In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() rlen value is a user-controlled value, but dtv5100_i2c_msg() does not check the size of the rlen value. Therefore, if it is set to a value larger than sizeof(st->data), an out-of-bounds vuln occurs for st->data. Therefore, we need to add proper range checking to prevent this vuln.
How severe is CVE-2025-68819?
CVE-2025-68819 has a CVSS score of 7.8/10 (HIGH severity). The EPSS model estimates a 0.17% probability of exploitation in the next 30 days.
How do I fix CVE-2025-68819?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2025

View all 2025CVEs →

Are you affected by CVE-2025-68819?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST