In the Linux kernel, the following vulnerability has been resolved:
firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers
Check that all fields of a V2 algorithm header fit into the available firmware data buffer.
The wmfw V2 format introduced variable-length strings in the algorithm block header. This means the overall header length is variable, and the position of most fields varies depending on the length of the string fields. Each field must be checked to ensure that it does not overflow the firmware data buffer.
As this ia bugfix patch, the fixes avoid making any significant change to the existing code. This makes it easier to review and less likely to introduce new bugs.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-kvmUpgrade kernelUpgrade kernel-docUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-develUpgrade perfUpgrade kernel-modulesUpgrade bpftoolUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-debugUpgrade kernel-coreUpgrade python3-perfUpgrade kernel-debug-coreUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-headersUpgrade kernel-rt-modulesUpgrade kernel-debug-modulesUpgrade kernel-toolsUpgrade kernel-rt-debug-core | Sep 26, 2024 | Jul 29, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jul 29, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 25, 2024 | Jul 29, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade bpftool-debuginfoUpgrade kernel-coreUpgrade python3-perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-rtUpgrade kernel-tools-libsUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-develUpgrade kernel-rt-modules-extraUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-coreUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-debugUpgrade python3-perfUpgrade kernel-rt-debugUpgrade kernel-cross-headersUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-rt-develUpgrade kernel-develUpgrade bpftool | Oct 2, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade kernel-azureUpgrade kernel-default-livepatchUpgrade dtb-rockchipUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-64kbUpgrade dtb-caviumUpgrade kernel-rt_debug-develUpgrade kernel-64kb-develUpgrade dtb-alteraUpgrade dtb-amazonUpgrade kernel-rtUpgrade dtb-exynosUpgrade dtb-xilinxUpgrade gfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade ocfs2-kmp-64kbUpgrade dtb-renesasUpgrade kernel-default-base-rebuildUpgrade kernel-rt-extraUpgrade kernel-devel-rtUpgrade dtb-mediatekUpgrade kernel-debugUpgrade kernel-syms-azureUpgrade kernel-64kbUpgrade kernel-obs-buildUpgrade dtb-sprdUpgrade kernel-rt-develUpgrade dlm-kmp-rtUpgrade dtb-allwinnerUpgrade dtb-hisiliconUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade kernel-source-rtUpgrade gfs2-kmp-azureUpgrade kernel-source-azureUpgrade kselftests-kmp-azureUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-freescaleUpgrade cluster-md-kmp-64kbUpgrade dtb-lgUpgrade dtb-qcomUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-default-develUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-azure-develUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-debug-develUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-develUpgrade dtb-marvellUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-azure-extraUpgrade dlm-kmp-azureUpgrade dtb-broadcomUpgrade dtb-amlogicUpgrade kernel-docs-htmlUpgrade dtb-amdUpgrade kernel-devel-azureUpgrade kernel-default-baseUpgrade dtb-socionextUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-qaUpgrade dtb-armUpgrade kernel-rt-vdsoUpgrade kernel-64kb-livepatch-develUpgrade dtb-apmUpgrade kernel-azure-livepatch-develUpgrade dtb-appleUpgrade kernel-docsUpgrade kernel-default-extra | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-ibmUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-nvidiaUpgrade linux-image-azureUpgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-gkeopUpgrade linux-image-oem-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-gkeUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1017-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-virtual | Nov 4, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub