In the Linux kernel, the following vulnerability has been resolved:
firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files
Use strnlen() instead of strlen() on the algorithm and coefficient name string arrays in V1 wmfw files.
In V1 wmfw files the name is a NUL-terminated string in a fixed-size array. cs_dsp should protect against overrunning the array if the NUL terminator is missing.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-coreUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modules-extraUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-rt-debug-kvmUpgrade python3-perfUpgrade kernel-rt-debug-develUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade bpftoolUpgrade kernel-zfcpdumpUpgrade kernel-docUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade perfUpgrade kernel-toolsUpgrade kernel-modulesUpgrade kernel-devel | Sep 26, 2024 | Jul 29, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 2, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jul 29, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Sep 25, 2024 | Jul 29, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-coreUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-kvmUpgrade kernel-headersUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade perf-debuginfoUpgrade perfUpgrade python3-perfUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-devel | Oct 2, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade dtb-apmUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade dtb-amlogicUpgrade kernel-debug-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-default-extraUpgrade dtb-appleUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debugUpgrade dlm-kmp-64kbUpgrade kernel-default-develUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade dtb-broadcomUpgrade kselftests-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-docs-htmlUpgrade dtb-qcomUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-defaultUpgrade dtb-caviumUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade kernel-symsUpgrade kernel-azure-optionalUpgrade dtb-amdUpgrade kernel-azure-extraUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-rtUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-obs-qaUpgrade dtb-amazonUpgrade dtb-lgUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-azure-develUpgrade kernel-default-livepatchUpgrade kernel-64kb-optionalUpgrade kernel-source-rtUpgrade dtb-marvellUpgrade kernel-default-vdsoUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade kernel-syms-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-nvidiaUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-devel-rtUpgrade dtb-socionextUpgrade reiserfs-kmp-azureUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade ocfs2-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-rt-extraUpgrade kernel-defaultUpgrade kernel-azure-vdsoUpgrade kernel-default-baseUpgrade kernel-rt-optionalUpgrade dtb-armUpgrade dlm-kmp-rtUpgrade kernel-default-base-rebuildUpgrade dtb-renesasUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-rt-develUpgrade kernel-source-vanillaUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-azure | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-nvidiaUpgrade linux-image-oem-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-gkeUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1017-azureUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-virtualUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1016-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws | Nov 4, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub