In the Linux kernel, the following vulnerability has been resolved:
firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers
Check that all fields of a V2 algorithm header fit into the available firmware data buffer.
The wmfw V2 format introduced variable-length strings in the algorithm block header. This means the overall header length is variable, and the position of most fields varies depending on the length of the string fields. Each field must be checked to ensure that it does not overflow the firmware data buffer.
As this ia bugfix patch, the fixes avoid making any significant change to the existing code. This makes it easier to review and less likely to introduce new bugs.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-docUpgrade perfUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libsUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade bpftoolUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-coreUpgrade kernelUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-headersUpgrade kernel-rtUpgrade kernel-tools | Sep 26, 2024 | Jul 29, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 2, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jul 29, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Sep 25, 2024 | Jul 29, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-rt-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-kvmUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade python3-perfUpgrade kernel-rt-debugUpgrade kernel-cross-headersUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-develUpgrade bpftoolUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-rt-coreUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-devel | Oct 2, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade kernel-azure-vdsoUpgrade dtb-broadcomUpgrade dtb-amlogicUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-default-baseUpgrade kernel-debug-livepatch-develUpgrade kernel-debug-develUpgrade dlm-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-azure-livepatch-develUpgrade dtb-amdUpgrade kernel-symsUpgrade dtb-appleUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-docsUpgrade kernel-default-livepatch-develUpgrade kernel-macrosUpgrade kernel-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-extraUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade dtb-armUpgrade dtb-socionextUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-azure-develUpgrade kernel-docs-htmlUpgrade kernel-kvmsmallUpgrade kernel-rt-vdsoUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-64kb-develUpgrade kernel-rt-extraUpgrade kselftests-kmp-azureUpgrade dtb-renesasUpgrade ocfs2-kmp-64kbUpgrade kernel-debugUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-devel-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-rtUpgrade kernel-default-livepatchUpgrade dtb-exynosUpgrade dtb-amazonUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade dtb-rockchipUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-64kbUpgrade dtb-sprdUpgrade dtb-hisiliconUpgrade dtb-allwinnerUpgrade reiserfs-kmp-defaultUpgrade kernel-source-azureUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade kernel-64kb-extraUpgrade dtb-qcomUpgrade cluster-md-kmp-azureUpgrade kernel-rt-develUpgrade dtb-lgUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade dtb-freescaleUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-mediatekUpgrade gfs2-kmp-azureUpgrade kernel-develUpgrade dtb-caviumUpgrade kernel-source-rtUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-zfcpdumpUpgrade dtb-marvellUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-vdso | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade linux-image-gkeopUpgrade linux-image-oem-24.04Upgrade linux-image-azureUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-raspiUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1017-azureUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-awsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1018-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-gcp | Nov 4, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub