In the Linux kernel, the following vulnerability has been resolved:
firmware: cs_dsp: Validate payload length before processing block
Move the payload length check in cs_dsp_load() and cs_dsp_coeff_load() to be done before the block is processed.
The check that the length of a block payload does not exceed the number of remaining bytes in the firwmware file buffer was being done near the end of the loop iteration. However, some code before that check used the length field without validating it.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-zfcpdumpUpgrade kernel-docUpgrade kernel-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-rt-modules-extraUpgrade perfUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-headersUpgrade kernel-rt-coreUpgrade bpftoolUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade kernel-modulesUpgrade kernel-coreUpgrade python3-perfUpgrade kernel-rt-kvmUpgrade kernel-debug | Sep 26, 2024 | Aug 7, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Aug 7, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Aug 7, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Sep 25, 2024 | Aug 7, 2024 |
| Rocky_linux | — | Upgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-headersUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-modulesUpgrade kernel-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-debugUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extra | Oct 2, 2024 | Aug 7, 2024 |
| Suse | — | Upgrade kernel-rt-develUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-optionalUpgrade kselftests-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-devel-azureUpgrade kernel-source-rtUpgrade cluster-md-kmp-azureUpgrade dtb-amazonUpgrade dtb-broadcomUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade dtb-lgUpgrade kernel-default-develUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-source-azureUpgrade dtb-xilinxUpgrade dtb-alteraUpgrade dtb-amlogicUpgrade kernel-64kb-optionalUpgrade kernel-azure-extraUpgrade dlm-kmp-64kbUpgrade kernel-rtUpgrade kernel-docs-htmlUpgrade kernel-syms-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-develUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade kernel-obs-qaUpgrade kselftests-kmp-64kbUpgrade kernel-default-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-default-livepatchUpgrade dtb-qcomUpgrade kernel-symsUpgrade kernel-macrosUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade kernel-azure-develUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-apmUpgrade dtb-freescaleUpgrade kernel-rt-livepatchUpgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade kernel-defaultUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-amdUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade dtb-renesasUpgrade kernel-develUpgrade kernel-rt-extraUpgrade kernel-azure-vdsoUpgrade dtb-nvidiaUpgrade dtb-socionextUpgrade dtb-mediatekUpgrade dtb-marvellUpgrade dtb-armUpgrade ocfs2-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-rt-vdsoUpgrade kernel-docsUpgrade kernel-source-vanillaUpgrade dlm-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-obs-buildUpgrade kernel-devel-rtUpgrade dlm-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-develUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade dtb-appleUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-extraUpgrade kernel-default-baseUpgrade dtb-hisiliconUpgrade kernel-rt_debugUpgrade kernel-debug | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1016-oemUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1016-azureUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-oracleUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-awsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-gkeUpgrade linux-image-nvidiaUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-6.8.0-48-lowlatency-64k | Nov 4, 2024 | Aug 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub