In the Linux kernel, the following vulnerability has been resolved:
firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers
Check that all fields of a V2 algorithm header fit into the available firmware data buffer.
The wmfw V2 format introduced variable-length strings in the algorithm block header. This means the overall header length is variable, and the position of most fields varies depending on the length of the string fields. Each field must be checked to ensure that it does not overflow the firmware data buffer.
As this ia bugfix patch, the fixes avoid making any significant change to the existing code. This makes it easier to review and less likely to introduce new bugs.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-abi-stablelistsUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-docUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade perfUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel | Sep 26, 2024 | Jul 29, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 2, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jul 29, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Sep 25, 2024 | Jul 29, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade bpftoolUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade perfUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-develUpgrade kernel-rt-kvmUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-coreUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debuginfo-common-x86_64 | Oct 2, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade kernel-rt-develUpgrade kernel-64kbUpgrade kernel-obs-buildUpgrade dtb-sprdUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-azureUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-azureUpgrade dtb-xilinxUpgrade kernel-default-livepatchUpgrade kernel-rtUpgrade kernel-develUpgrade gfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade dtb-freescaleUpgrade ocfs2-kmp-defaultUpgrade dtb-amazonUpgrade dtb-exynosUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-caviumUpgrade kernel-debugUpgrade gfs2-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-default-vdsoUpgrade kernel-syms-azureUpgrade ocfs2-kmp-64kbUpgrade dtb-renesasUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-lgUpgrade reiserfs-kmp-64kbUpgrade dtb-mediatekUpgrade dtb-rockchipUpgrade kernel-64kb-extraUpgrade kernel-debug-vdsoUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade dtb-alteraUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade dtb-qcomUpgrade kernel-default-optionalUpgrade dtb-allwinnerUpgrade dtb-hisiliconUpgrade kernel-devel-rtUpgrade kernel-rt-livepatchUpgrade kernel-sourceUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-macrosUpgrade gfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kselftests-kmp-rtUpgrade kernel-azure-extraUpgrade dlm-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade dtb-amdUpgrade dtb-appleUpgrade kernel-debug-develUpgrade kernel-azure-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade dtb-broadcomUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade kernel-symsUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade kernel-default-extraUpgrade dtb-socionextUpgrade dtb-armUpgrade dtb-nvidiaUpgrade kernel-docsUpgrade dtb-amlogicUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-azureUpgrade gfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade dtb-marvellUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-docs-htmlUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade kernel-64kb-livepatch-devel | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-azureUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1017-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1018-awsUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-48-genericUpgrade linux-image-awsUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-oem-22.04dUpgrade linux-image-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-6.8.0-1017-gcp | Nov 4, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub