In the Linux kernel, the following vulnerability has been resolved:
firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers
Check that all fields of a V2 algorithm header fit into the available firmware data buffer.
The wmfw V2 format introduced variable-length strings in the algorithm block header. This means the overall header length is variable, and the position of most fields varies depending on the length of the string fields. Each field must be checked to ensure that it does not overflow the firmware data buffer.
As this ia bugfix patch, the fixes avoid making any significant change to the existing code. This makes it easier to review and less likely to introduce new bugs.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-docUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-rt-kvmUpgrade perfUpgrade kernel-cross-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade python3-perfUpgrade kernelUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-coreUpgrade kernel-toolsUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-tools-libs-devel | Sep 26, 2024 | Jul 29, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jul 29, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 25, 2024 | Jul 29, 2024 |
| Rocky_linux | — | Upgrade kernel-rtUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-rt-debug-develUpgrade kernel-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-tools-debuginfoUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-rt-debugUpgrade kernel-cross-headersUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-rt-modules-extra | Oct 2, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade dlm-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-allwinnerUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-source-azureUpgrade kernel-rt-develUpgrade kernel-obs-buildUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade reiserfs-kmp-azureUpgrade kernel-source-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-64kb-develUpgrade dtb-caviumUpgrade dtb-exynosUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-rtUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-amazonUpgrade kernel-debugUpgrade kernel-syms-azureUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-64kbUpgrade dtb-mediatekUpgrade dtb-lgUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-livepatchUpgrade dtb-freescaleUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-develUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-64kbUpgrade kernel-sourceUpgrade dtb-renesasUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-64kbUpgrade dtb-rockchipUpgrade dtb-alteraUpgrade dtb-qcomUpgrade kernel-rt_debug-develUpgrade kernel-64kb-extraUpgrade kernel-rt-extraUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-rtUpgrade dtb-marvellUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-syms-rtUpgrade kernel-zfcpdumpUpgrade dtb-apmUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade gfs2-kmp-64kbUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-64kb-livepatch-develUpgrade kernel-symsUpgrade kernel-obs-qaUpgrade dtb-appleUpgrade kernel-azure-livepatch-develUpgrade dtb-amdUpgrade kernel-azure-extraUpgrade kernel-debug-livepatch-develUpgrade dtb-amlogicUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-64kb-optionalUpgrade kernel-debug-develUpgrade dtb-broadcomUpgrade kernel-azure-vdsoUpgrade dtb-armUpgrade kernel-azure-develUpgrade dtb-socionextUpgrade kernel-default-base | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-64kUpgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1016-oemUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1017-azureUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-kvmUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1018-awsUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1016-azureUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04aUpgrade linux-image-raspiUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-azureUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-genericUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-generic-lpae | Nov 4, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub