{"id":"CVE-2025-68773","revision":"812e3b08326747a2b03cd6289c80f8f7","records":[{"revision":"812e3b08326747a2b03cd6289c80f8f7","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-68773","aliases":[],"title":"spi: fsl-cpm: Check length parity before switching to 16 bit mode","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nspi: fsl-cpm: Check length parity before switching to 16 bit mode\n\nCommit fc96ec826bce (\"spi: fsl-cpm: Use 16 bit mode for large transfers\nwith even size\") failed to make sure that the size is really even\nbefore switching to 16 bit mode. Until recently the problem went\nunnoticed because kernfs uses a pre-allocated bounce buffer of size\nPAGE_SIZE for reading EEPROM.\n\nBut commit 8ad6249c51d0 (\"eeprom: at25: convert to spi-mem API\")\nintroduced an additional dynamically allocated bounce buffer whose size\nis exactly the size of the transfer, leading to a buffer overrun in\nthe fsl-cpm driver when that size is odd.\n\nAdd the missing length parity verification and remain in 8 bit mode\nwhen the length is not even.","state":0,"publishedAt":"2026-01-13T15:28:50.686+00:00","modifiedAt":"2026-10-15T01:10:06.465+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/spi/spi-fsl-spi.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"60afe299bb541a928ba39bcb4ae8d3e428d1c5a5\",\n                            \"lessThan\": \"c8f1d35076b78df61ace737e41cc1f4b7b63236c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"4badd33929c05ed314794b95f1af1308f7222be8\",\n                            \"lessThan\": \"9c34a4a2ead00979d203a8c16bea87f0ef5291d8\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"7f6738e003b364783f3019fdf6e7645bc8dd1643\",\n                            \"lessThan\": \"837a23a11e0f734f096c7c7b0778d0e625e3dc87\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"fc96ec826bced75cc6b9c07a4ac44bbf651337ab\",\n                            \"lessThan\": \"3dd6d01384823e1bd8602873153d6fc4337ac4fe\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"fc96ec826bced75cc6b9c07a4ac44bbf651337ab\",\n                            \"lessThan\": \"743cebcbd1b2609ec5057ab474979cef73d1b681\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"fc96ec826bced75cc6b9c07a4ac44bbf651337ab\",\n                            \"lessThan\": \"be0b613198e6bfa104ad520397cab82ad3ec1771\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"fc96ec826bced75cc6b9c07a4ac44bbf651337ab\",\n                            \"lessThan\": \"1417927df8049a0194933861e9b098669a95c762\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"42c04316d9275ec267d36e5e9064cd56c9884148\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"dc120f2d35b030390a2bc0f94dd5f37e900cae91\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"b558275c1b040f0e5aa56c862241f9212b6118c3\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"b9d9e8856f1c83e4277403f9b4c369b322ebcb12\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"36a6d0f66c874666caf4e8be155b1be30f6231be\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5.10.181\",\n                            \"lessThan\": \"5.10.248\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.114\",\n                            \"lessThan\": \"5.15.198\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.29\",\n                            \"lessThan\": \"6.1.160\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"4.14.316\",\n                            \"lessThan\": \"4.15\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"4.19.284\",\n                            \"lessThan\": \"4.20\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.4.244\",\n                            \"lessThan\": \"5.5\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.2.16\",\n                            \"lessThan\": \"6.3\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.3.3\",\n                            \"lessThan\": \"6.4\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/spi/spi-fsl-spi.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.4\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.4\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.248\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.198\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.160\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.120\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.64\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.3\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.19\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/c8f1d35076b78df61ace737e41cc1f4b7b63236c","https://git.kernel.org/stable/c/9c34a4a2ead00979d203a8c16bea87f0ef5291d8","https://git.kernel.org/stable/c/837a23a11e0f734f096c7c7b0778d0e625e3dc87","https://git.kernel.org/stable/c/3dd6d01384823e1bd8602873153d6fc4337ac4fe","https://git.kernel.org/stable/c/743cebcbd1b2609ec5057ab474979cef73d1b681","https://git.kernel.org/stable/c/be0b613198e6bfa104ad520397cab82ad3ec1771","https://git.kernel.org/stable/c/1417927df8049a0194933861e9b098669a95c762"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-68773","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-68773","identifiers":["CVE-2025-68773"]},"retained":false,"historicalAffected":[]}],"coverage":[]}