In the Linux kernel, the following vulnerability has been resolved:
firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers
Check that all fields of a V2 algorithm header fit into the available firmware data buffer.
The wmfw V2 format introduced variable-length strings in the algorithm block header. This means the overall header length is variable, and the position of most fields varies depending on the length of the string fields. Each field must be checked to ensure that it does not overflow the firmware data buffer.
As this ia bugfix patch, the fixes avoid making any significant change to the existing code. This makes it easier to review and less likely to introduce new bugs.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernel-debugUpgrade perfUpgrade kernel-rt-kvmUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-coreUpgrade kernel-develUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-docUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-zfcpdumpUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-devel | Sep 26, 2024 | Jul 29, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jul 29, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Sep 25, 2024 | Jul 29, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modules-extraUpgrade perfUpgrade kernel-rt-develUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-develUpgrade kernel-cross-headersUpgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-modules-extraUpgrade kernel-debug-debuginfoUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-toolsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfo-common-x86_64 | Oct 2, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade kernel-rt-extraUpgrade gfs2-kmp-azureUpgrade dtb-lgUpgrade kernel-rtUpgrade dtb-mediatekUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-azureUpgrade dtb-rockchipUpgrade kernel-64kb-extraUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-rt-optionalUpgrade dtb-renesasUpgrade ocfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debug-develUpgrade kernel-sourceUpgrade dtb-alteraUpgrade dtb-qcomUpgrade cluster-md-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-hisiliconUpgrade kernel-syms-azureUpgrade kernel-rt-develUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-debugUpgrade kernel-64kbUpgrade kernel-obs-buildUpgrade dtb-sprdUpgrade kernel-devel-rtUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-caviumUpgrade dtb-amazonUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-source-vanillaUpgrade dtb-exynosUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade kernel-default-develUpgrade dlm-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-default-vdsoUpgrade dtb-freescaleUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade dlm-kmp-rtUpgrade kernel-azureUpgrade dtb-xilinxUpgrade kernel-azure-vdsoUpgrade kernel-default-baseUpgrade dtb-amdUpgrade kernel-azure-livepatch-develUpgrade dtb-appleUpgrade gfs2-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-debug-develUpgrade dlm-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-rt_debug-vdsoUpgrade kernel-symsUpgrade kernel-defaultUpgrade dtb-nvidiaUpgrade kselftests-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-default-extraUpgrade dtb-broadcomUpgrade dtb-amlogicUpgrade dtb-armUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade dtb-socionextUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-vdsoUpgrade dtb-marvellUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-azure-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kernel-macrosUpgrade kernel-default-livepatch-devel | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1017-azureUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-48-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-awsUpgrade linux-image-gkeUpgrade linux-image-azureUpgrade linux-image-oem-24.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1016-azureUpgrade linux-image-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-oem-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-generic-64k | Nov 4, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub