CVE-2025-68352

CVE-2025-68352 refers to a Linux kernel vulnerability in the SPI ch341 driver. The root cause is a memory-copy miscalculation in spi-ch341.c: the code computes len as min(32, trans->len + 1) which includes the 1-byte command header. When copying from trans->tx_buf to ch341->tx_buf + 1, u...