CVE-2025-68347

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-68347", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2025-12-16T14:48:05.299Z", "datePublished": "2025-12-24T10:32:39.804Z", "dateUpdated": "2026-10-16T15:09:43.312Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T12:10:58.597Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events\n\nThe DSP event handling code in hwdep_read() could write more bytes to\nthe user buffer than requested, when a user provides a buffer smaller\nthan the event header size (8 bytes).\n\nFix by using min_t() to clamp the copy size, This ensures we never copy\nmore than the user requested."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH"}, "scenarios": [{"lang": "en", "value": "AV:L - Exploitation reaches the vulnerable callback through read() on the local ALSA hwdep device; the connected MOTU interface is a deployment prerequisite rather than the attack channel.\nAC:L - A device-authorized attacker can start streaming, induce or await a DSP parameter event, and deterministically request fewer than eight bytes. No race or condition outside the attacker\u2019s influence is required.\nPR:L - The path has no capability or namespace check, but requires ordinary access to the ALSA device node, commonly granted to an active unprivileged user or audio-group member.\nUI:N - No human victim action is required once a DSP event is queued; the attacker or an automatically operating consumer can trigger the faulty read.\nS:U - The corruption occurs within the host\u2019s kernel/userspace security authority and does not cross a VM, IOMMU, or comparable isolation boundary.\nC:H - The direct header contains no secret, but the out-of-bounds write can corrupt adjacent allocator or control data in a privileged consumer. Under the required higher-severity assumption, resulting control-flow compromise could expose all data accessible to that process.\nI:H - The kernel writes an eight-byte header despite a request for as few as zero bytes, allowing up to seven bytes of adjacent userspace memory corruption. Such an out-of-bounds write can corrupt pointers or allocator metadata and potentially enable control-flow hijacking.\nA:H - The overwrite can crash the consuming process, and the still-queued or repeatedly induced DSP event permits recurring denial of a critical audio or control service."}]}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["sound/firewire/motu/motu-hwdep.c"], "versions": [{"version": "634ec0b2906efd46f6f57977e172aa3470aca432", "lessThan": "16620f0617400746984362c3d6ac547eeae1d35f", "status": "affected", "versionType": "git"}, {"version": "634ec0b2906efd46f6f57977e172aa3470aca432", "lessThan": "ddd32ec66bc4eb6969fe835e4cc1c0706c6348fe", "status": "affected", "versionType": "git"}, {"version": "634ec0b2906efd46f6f57977e172aa3470aca432", "lessThan": "6275fd726d53a8ec724f20201cf3bd862711e17b", "status": "affected", "versionType": "git"}, {"version": "634ec0b2906efd46f6f57977e172aa3470aca432", "lessThan": "161291bac551821bba98eb4ea84c82338578d1b0", "status": "affected", "versionType": "git"}, {"version": "634ec0b2906efd46f6f57977e172aa3470aca432", "lessThan": "cdda0d06f8650e33255f79839f188bbece44117c", "status": "affected", "versionType": "git"}, {"version": "634ec0b2906efd46f6f57977e172aa3470aca432", "lessThan": "210d77cca3d0494ed30a5c628b20c1d95fa04fb1", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["sound/firewire/motu/motu-hwdep.c"], "versions": [{"version": "5.16", "status": "affected"}, {"version": "0", "lessThan": "5.16", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.160", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.120", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.63", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.17.13", "lessThanOrEqual": "6.17.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.2", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.19", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.16", "versionEndExcluding": "6.1.160"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.16", "versionEndExcluding": "6.6.120"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.16", "versionEndExcluding": "6.12.63"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.16", "versionEndExcluding": "6.17.13"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.16", "versionEndExcluding": "6.18.2"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.16", "versionEndExcluding": "6.19"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/16620f0617400746984362c3d6ac547eeae1d35f"}, {"url": "https://git.kernel.org/stable/c/ddd32ec66bc4eb6969fe835e4cc1c0706c6348fe"}, {"url": "https://git.kernel.org/stable/c/6275fd726d53a8ec724f20201cf3bd862711e17b"}, {"url": "https://git.kernel.org/stable/c/161291bac551821bba98eb4ea84c82338578d1b0"}, {"url": "https://git.kernel.org/stable/c/cdda0d06f8650e33255f79839f188bbece44117c"}, {"url": "https://git.kernel.org/stable/c/210d77cca3d0494ed30a5c628b20c1d95fa04fb1"}], "title": "ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-68347", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-16T15:04:48.612733Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-16T15:09:43.312Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-68347", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-16T15:04:48.612733Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-16T15:04:49.463Z"}}], "cna": {"title": "ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events", "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "scenarios": [{"lang": "en", "value": "AV:L - Exploitation reaches the vulnerable callback through read() on the local ALSA hwdep device; the connected MOTU interface is a deployment prerequisite rather than the attack channel.\nAC:L - A device-authorized attacker can start streaming, induce or await a DSP parameter event, and deterministically request fewer than eight bytes. No race or condition outside the attacker\u2019s influence is required.\nPR:L - The path has no capability or namespace check, but requires ordinary access to the ALSA device node, commonly granted to an active unprivileged user or audio-group member.\nUI:N - No human victim action is required once a DSP event is queued; the attacker or an automatically operating consumer can trigger the faulty read.\nS:U - The corruption occurs within the host\u2019s kernel/userspace security authority and does not cross a VM, IOMMU, or comparable isolation boundary.\nC:H - The direct header contains no secret, but the out-of-bounds write can corrupt adjacent allocator or control data in a privileged consumer. Under the required higher-severity assumption, resulting control-flow compromise could expose all data accessible to that process.\nI:H - The kernel writes an eight-byte header despite a request for as few as zero bytes, allowing up to seven bytes of adjacent userspace memory corruption. Such an out-of-bounds write can corrupt pointers or allocator metadata and potentially enable control-flow hijacking.\nA:H - The overwrite can crash the consuming process, and the still-queued or repeatedly induced DSP event permits recurring denial of a critical audio or control service."}]}], "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "634ec0b2906efd46f6f57977e172aa3470aca432", "lessThan": "16620f0617400746984362c3d6ac547eeae1d35f", "versionType": "git"}, {"status": "affected", "version": "634ec0b2906efd46f6f57977e172aa3470aca432", "lessThan": "ddd32ec66bc4eb6969fe835e4cc1c0706c6348fe", "versionType": "git"}, {"status": "affected", "version": "634ec0b2906efd46f6f57977e172aa3470aca432", "lessThan": "6275fd726d53a8ec724f20201cf3bd862711e17b", "versionType": "git"}, {"status": "affected", "version": "634ec0b2906efd46f6f57977e172aa3470aca432", "lessThan": "161291bac551821bba98eb4ea84c82338578d1b0", "versionType": "git"}, {"status": "affected", "version": "634ec0b2906efd46f6f57977e172aa3470aca432", "lessThan": "cdda0d06f8650e33255f79839f188bbece44117c", "versionType": "git"}, {"status": "affected", "version": "634ec0b2906efd46f6f57977e172aa3470aca432", "lessThan": "210d77cca3d0494ed30a5c628b20c1d95fa04fb1", "versionType": "git"}], "programFiles": ["sound/firewire/motu/motu-hwdep.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.16"}, {"status": "unaffected", "version": "0", "lessThan": "5.16", "versionType": "semver"}, {"status": "unaffected", "version": "6.1.160", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.120", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.63", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.17.13", "versionType": "semver", "lessThanOrEqual": "6.17.*"}, {"status": "unaffected", "version": "6.18.2", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "6.19", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["sound/firewire/motu/motu-hwdep.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/16620f0617400746984362c3d6ac547eeae1d35f"}, {"url": "https://git.kernel.org/stable/c/ddd32ec66bc4eb6969fe835e4cc1c0706c6348fe"}, {"url": "https://git.kernel.org/stable/c/6275fd726d53a8ec724f20201cf3bd862711e17b"}, {"url": "https://git.kernel.org/stable/c/161291bac551821bba98eb4ea84c82338578d1b0"}, {"url": "https://git.kernel.org/stable/c/cdda0d06f8650e33255f79839f188bbece44117c"}, {"url": "https://git.kernel.org/stable/c/210d77cca3d0494ed30a5c628b20c1d95fa04fb1"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events\n\nThe DSP event handling code in hwdep_read() could write more bytes to\nthe user buffer than requested, when a user provides a buffer smaller\nthan the event header size (8 bytes).\n\nFix by using min_t() to clamp the copy size, This ensures we never copy\nmore than the user requested."}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.1.160", "versionStartIncluding": "5.16"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.6.120", "versionStartIncluding": "5.16"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.12.63", "versionStartIncluding": "5.16"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.17.13", "versionStartIncluding": "5.16"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.18.2", "versionStartIncluding": "5.16"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.19", "versionStartIncluding": "5.16"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T12:10:58.597Z"}}}, "cveMetadata": {"cveId": "CVE-2025-68347", "state": "PUBLISHED", "dateUpdated": "2026-10-16T15:09:43.312Z", "dateReserved": "2025-12-16T14:48:05.299Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2025-12-24T10:32:39.804Z", "assignerShortName": "Linux"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["sound/firewire/motu/motu-hwdep.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "16620f0617400746984362c3d6ac547eeae1d35f", "status": "affected", "version": "634ec0b2906efd46f6f57977e172aa3470aca432", "versionType": "git"}, {"lessThan": "ddd32ec66bc4eb6969fe835e4cc1c0706c6348fe", "status": "affected", "version": "634ec0b2906efd46f6f57977e172aa3470aca432", "versionType": "git"}, {"lessThan": "6275fd726d53a8ec724f20201cf3bd862711e17b", "status": "affected", "version": "634ec0b2906efd46f6f57977e172aa3470aca432", "versionType": "git"}, {"lessThan": "161291bac551821bba98eb4ea84c82338578d1b0", "status": "affected", "version": "634ec0b2906efd46f6f57977e172aa3470aca432", "versionType": "git"}, {"lessThan": "cdda0d06f8650e33255f79839f188bbece44117c", "status": "affected", "version": "634ec0b2906efd46f6f57977e172aa3470aca432", "versionType": "git"}, {"lessThan": "210d77cca3d0494ed30a5c628b20c1d95fa04fb1", "status": "affected", "version": "634ec0b2906efd46f6f57977e172aa3470aca432", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["sound/firewire/motu/motu-hwdep.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.16"}, {"lessThan": "5.16", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.160", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.120", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.63", "versionType": "semver"}, {"lessThanOrEqual": "6.17.*", "status": "unaffected", "version": "6.17.13", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.2", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "6.19", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events\n\nThe DSP event handling code in hwdep_read() could write more bytes to\nthe user buffer than requested, when a user provides a buffer smaller\nthan the event header size (8 bytes).\n\nFix by using min_t() to clamp the copy size, This ensures we never copy\nmore than the user requested."}, {"lang": "es", "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad:\\n\\nALSA: firewire-motu: corregir desbordamiento de b\u00fafer en hwdep read para eventos DSP\\n\\nEl c\u00f3digo de manejo de eventos DSP en hwdep_read() pod\u00eda escribir m\u00e1s bytes en el b\u00fafer del usuario de los solicitados, cuando el usuario proporciona un b\u00fafer m\u00e1s peque\u00f1o que el tama\u00f1o del encabezado del evento (8?bytes).\\n\\nSe corrige usando min_t() para limitar el tama\u00f1o de la copia. Esto garantiza que nunca se copie m\u00e1s de lo solicitado por el usuario."}], "id": "CVE-2025-68347", "lastModified": "2026-10-19T21:10:00.160", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-68347", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-10-16T15:04:48.612733Z", "version": "2.0.3"}}]}, "published": "2025-12-24T11:15:58.050", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/161291bac551821bba98eb4ea84c82338578d1b0"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/16620f0617400746984362c3d6ac547eeae1d35f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/210d77cca3d0494ed30a5c628b20c1d95fa04fb1"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/6275fd726d53a8ec724f20201cf3bd862711e17b"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/cdda0d06f8650e33255f79839f188bbece44117c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/ddd32ec66bc4eb6969fe835e4cc1c0706c6348fe"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Deferred"}

{"bugzilla": {"description": "kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events", "id": "2424879", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2424879"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "details": ["In the Linux kernel, the following vulnerability has been resolved:\nALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events\nThe DSP event handling code in hwdep_read() could write more bytes to\nthe user buffer than requested, when a user provides a buffer smaller\nthan the event header size (8 bytes).\nFix by using min_t() to clamp the copy size, This ensures we never copy\nmore than the user requested."], "name": "CVE-2025-68347", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2025-12-24T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2025-68347\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-68347\nhttps://lore.kernel.org/linux-cve-announce/2025122453-CVE-2025-68347-74dd@gregkh/T"], "threat_severity": "Low"}

{}