CVE-2025-68352 spi: ch341: fix out-of-bounds memory access in ch341_transfer_one

🗓️ 24 Dec 2025 10:32:43Reported by GoogleType

osv

osv🔗 osv.dev👁 2 Views

Linux kernel fix for out-of-bounds access in ch341_transfer_one by copying minus one length bytes.

Reporter	Title	Published	Views	Family All 107
AstraLinux	Astra Linux - уязвимость в linux-5.10	20 May 202605:53	–	astralinux
Circl	CVE-2025-68352	2 Apr 202617:00	–	circl
CNNVD	Linux kernel 安全漏洞	24 Dec 202500:00	–	cnnvd
CVE	CVE-2025-68352	24 Dec 202510:32	–	cve
Cvelist	CVE-2025-68352 spi: ch341: fix out-of-bounds memory access in ch341_transfer_one	24 Dec 202510:32	–	cvelist
Debian CVE	CVE-2025-68352	24 Dec 202510:32	–	debiancve
EUVD	EUVD-2025-205102	24 Dec 202512:30	–	euvd
NVD	CVE-2025-68352	24 Dec 202511:15	–	nvd
Tenable Nessus	openSUSE 16 Security Update : kernel (openSUSE-SU-2026:20145-1)	4 Feb 202600:00	–	nessus
Tenable Nessus	SUSE SLES16 Security Update : kernel (SUSE-SU-2026:20220-1)	6 Feb 202600:00	–	nessus

Source	Link
git	www.git.kernel.org/stable/c/545d1287e40a55242f6ab68bcc1ba3b74088b1bc
git	www.git.kernel.org/stable/c/81841da1f30f66a850cc8796d99ba330aad9d696
git	www.git.kernel.org/stable/c/cad6c0fd6f3c0e76a1f75df4bce3b08a13f08974
git	www.git.kernel.org/stable/c/ea1e43966cd03098fcd5f0d72e6c2901d45fa08d
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68352.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-68352
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

02 Apr 2026 13:03Current

6.6Medium risk

Vulners AI Score6.6

EPSS0.0002

linux kernel ch341 driver spi ch341 out of bounds memory access minus one length