CVE-2025-68352 | Linux Kernel up to 6.12.62/6.17.12/6.18.1 spi ch341_transfer_one len out-of-bounds write

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.12.62/6.17.12/6.18.1. Affected by this vulnerability is the function ch341_transfer_one of the component spi. The manipulation of the argument len results in out-of-bounds write.

This vulnerability is known as CVE-2025-68352. Access to the local network is required for this attack. No exploit is available.

You should upgrade the affected component.