CVE-2025-37891 | Linux Kernel up to 6.6.89/6.12.27/6.14.5/6.15-rc4 ALSA do_convert_to_ump buffer overflow

A vulnerability classified as critical has been found in Linux Kernel up to 6.6.89/6.12.27/6.14.5/6.15-rc4. This affects the function do_convert_to_ump of the component ALSA. The manipulation leads to buffer overflow.

This vulnerability is uniquely identified as CVE-2025-37891. The attack needs to be approached within the local network. There is no exploit available.

It is recommended to upgrade the affected component.