In the Linux kernel, the following vulnerability has been resolved:
firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers
Check that all fields of a V2 algorithm header fit into the available firmware data buffer.
The wmfw V2 format introduced variable-length strings in the algorithm block header. This means the overall header length is variable, and the position of most fields varies depending on the length of the string fields. Each field must be checked to ensure that it does not overflow the firmware data buffer.
As this ia bugfix patch, the fixes avoid making any significant change to the existing code. This makes it easier to review and less likely to introduce new bugs.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modulesUpgrade kernel-headersUpgrade kernel-rt-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-extraUpgrade python3-perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade bpftoolUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-docUpgrade kernel-rt-develUpgrade perfUpgrade kernel-rt-debug-kvmUpgrade kernelUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-cross-headers | Sep 26, 2024 | Jul 29, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 2, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jul 29, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Sep 25, 2024 | Jul 29, 2024 |
| Rocky_linux | — | Upgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade bpftool-debuginfoUpgrade kernel-modulesUpgrade kernel-rtUpgrade kernel-debug-debuginfoUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-coreUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade perfUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-develUpgrade python3-perfUpgrade kernel-rt-debugUpgrade kernel-develUpgrade bpftoolUpgrade kernel-debugUpgrade kernel-debug-core | Oct 2, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-defaultUpgrade kernel-symsUpgrade dtb-appleUpgrade kernel-azure-livepatch-develUpgrade dtb-amdUpgrade kernel-rt_debugUpgrade dtb-amlogicUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-default-baseUpgrade dtb-armUpgrade kernel-azure-develUpgrade kernel-docs-htmlUpgrade kernel-docsUpgrade dtb-socionextUpgrade cluster-md-kmp-defaultUpgrade dtb-apmUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade dtb-broadcomUpgrade kernel-macrosUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-defaultUpgrade dtb-marvellUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-develUpgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatch-develUpgrade dtb-nvidiaUpgrade dlm-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-azure-extraUpgrade reiserfs-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-debug-develUpgrade dtb-freescaleUpgrade kernel-64kb-develUpgrade dlm-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-default-vdsoUpgrade dtb-caviumUpgrade kernel-source-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-develUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade kernel-default-optionalUpgrade kernel-devel-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-livepatchUpgrade dtb-lgUpgrade cluster-md-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-syms-azureUpgrade dtb-renesasUpgrade ocfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-rt-extraUpgrade kernel-debugUpgrade gfs2-kmp-azureUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade dtb-hisiliconUpgrade kernel-64kbUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-develUpgrade kernel-obs-buildUpgrade dtb-mediatekUpgrade dtb-amazonUpgrade kernel-rtUpgrade gfs2-kmp-defaultUpgrade dtb-exynosUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade dtb-qcomUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade kernel-default-livepatch | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-gkeopUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-gkeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1016-oemUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-48-genericUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-awsUpgrade linux-image-nvidia-64k-6.8 | Nov 4, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub