In the Linux kernel, the following vulnerability has been resolved:
firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers
Check that all fields of a V2 algorithm header fit into the available firmware data buffer.
The wmfw V2 format introduced variable-length strings in the algorithm block header. This means the overall header length is variable, and the position of most fields varies depending on the length of the string fields. Each field must be checked to ensure that it does not overflow the firmware data buffer.
As this ia bugfix patch, the fixes avoid making any significant change to the existing code. This makes it easier to review and less likely to introduce new bugs.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade perfUpgrade bpftoolUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernel-docUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-headersUpgrade kernel-zfcpdumpUpgrade kernel-toolsUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-tools-libs-devel | Sep 26, 2024 | Jul 29, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jul 29, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Sep 25, 2024 | Jul 29, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-modulesUpgrade kernel-debug-modulesUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade perfUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-debug-develUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-rt-coreUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade perf-debuginfo | Oct 2, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade kernel-rt_debugUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-docsUpgrade dtb-appleUpgrade dtb-armUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-develUpgrade dtb-socionextUpgrade kernel-azure-vdsoUpgrade kernel-devel-azureUpgrade dtb-marvellUpgrade kernel-default-baseUpgrade kernel-azure-extraUpgrade kernel-syms-rtUpgrade kernel-zfcpdumpUpgrade dtb-amdUpgrade dtb-broadcomUpgrade dtb-amlogicUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-macrosUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-apmUpgrade ocfs2-kmp-rtUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-docs-htmlUpgrade kernel-kvmsmallUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-develUpgrade kernel-default-develUpgrade kernel-develUpgrade kernel-azure-optionalUpgrade dtb-freescaleUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade dtb-lgUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-livepatchUpgrade dtb-mediatekUpgrade kernel-syms-azureUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-debugUpgrade dtb-renesasUpgrade ocfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade cluster-md-kmp-azureUpgrade kernel-rt-extraUpgrade dtb-qcomUpgrade dtb-alteraUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade dtb-xilinxUpgrade dtb-amazonUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-rtUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade dtb-exynosUpgrade gfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-rt-develUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-obs-buildUpgrade dtb-sprdUpgrade dtb-hisiliconUpgrade dtb-allwinnerUpgrade kernel-source-rtUpgrade kernel-default-vdsoUpgrade kernel-64kb-develUpgrade dtb-caviumUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-64kb | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade linux-image-raspiUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-oem-22.04Upgrade linux-image-azureUpgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-kvmUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-64kUpgrade linux-image-oracle | Nov 4, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 29, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub