EUVD-2025-205102

In the Linux kernel, the following vulnerability has been resolved: spi: ch341: fix out-of-bounds memory access in ch341transferone Discovered by Atuin - Automated Vulnerability Discovery Engine. The 'len' variable is calculated as 'min32, trans-len + 1', which includes the 1-byte command header...

CVE-2025-68352 spi: ch341: fix out-of-bounds memory access in ch341_transfer_one

In the Linux kernel, the following vulnerability has been resolved: spi: ch341: fix out-of-bounds memory access in ch341transferone Discovered by Atuin - Automated Vulnerability Discovery Engine. The 'len' variable is calculated as 'min32, trans-len + 1', which includes the 1-byte command header...

CVE-2025-68352

CVE-2025-68352: In the Linux kernel, spi/ch341: the function ch341_transfer_one incorrectly copies data using len = min(32, trans->len + 1), which includes the 1-byte command header. This can cause an out-of-bounds read from trans->tx_buf (size trans->len) and, if len equals CH341_PACKET...