In the Linux kernel, the following vulnerability has been resolved:
firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers
Check that all fields of a V2 algorithm header fit into the available firmware data buffer.
The wmfw V2 format introduced variable-length strings in the algorithm block header. This means the overall header length is variable, and the position of most fields varies depending on the length of the string fields. Each field must be checked to ensure that it does not overflow the firmware data buffer.
As this ia bugfix patch, the fixes avoid making any significant change to the existing code. This makes it easier to review and less likely to introduce new bugs.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rtUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernel-coreUpgrade kernel-debug-develUpgrade bpftoolUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-kvmUpgrade perfUpgrade kernel-rt-debug-modulesUpgrade python3-perfUpgrade kernel-rt-debugUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-develUpgrade kernel-zfcpdump-develUpgrade kernel-debug | Sep 26, 2024 | Jul 29, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jul 29, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Sep 25, 2024 | Jul 29, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-debuginfoUpgrade kernel-rtUpgrade kernel-coreUpgrade kernel-modulesUpgrade python3-perf-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-coreUpgrade kernel-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade kernel-rt-coreUpgrade perfUpgrade kernel-rt-debugUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-develUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-rt-develUpgrade perf-debuginfoUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel | Oct 2, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade kernel-default-optionalUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade dtb-alteraUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade kernel-debugUpgrade dtb-rockchipUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade dtb-renesasUpgrade kernel-debug-vdsoUpgrade kernel-default-vdsoUpgrade dtb-caviumUpgrade kernel-64kb-develUpgrade kernel-source-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-64kbUpgrade kernel-rt-develUpgrade dtb-allwinnerUpgrade kernel-rt-extraUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azureUpgrade kernel-default-develUpgrade kselftests-kmp-azureUpgrade kernel-develUpgrade reiserfs-kmp-64kbUpgrade dtb-lgUpgrade dtb-mediatekUpgrade ocfs2-kmp-azureUpgrade dtb-amazonUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-rtUpgrade kernel-rt-livepatchUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-exynosUpgrade dlm-kmp-rtUpgrade dtb-xilinxUpgrade kernel-64kbUpgrade kernel-obs-buildUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-source-azureUpgrade reiserfs-kmp-defaultUpgrade dtb-sprdUpgrade kernel-azureUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-appleUpgrade dtb-amdUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-azure-extraUpgrade dlm-kmp-azureUpgrade kernel-64kb-optionalUpgrade dtb-armUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-develUpgrade dtb-marvellUpgrade kernel-kvmsmall-vdsoUpgrade kernel-zfcpdumpUpgrade dtb-amlogicUpgrade kernel-defaultUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-default-baseUpgrade kernel-debug-livepatch-develUpgrade dtb-socionextUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-azure-vdsoUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-obs-qaUpgrade kernel-azure-develUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-apmUpgrade kernel-kvmsmallUpgrade kernel-debug-develUpgrade dtb-nvidiaUpgrade kernel-rt-livepatch-develUpgrade kernel-syms | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-ibmUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-virtualUpgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-48-genericUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-oracle-64k | Nov 4, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 29, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub