In the Linux kernel, the following vulnerability has been resolved:
firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files
Use strnlen() instead of strlen() on the algorithm and coefficient name string arrays in V1 wmfw files.
In V1 wmfw files the name is a NUL-terminated string in a fixed-size array. cs_dsp should protect against overrunning the array if the NUL terminator is missing.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-headersUpgrade kernel-rt-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-kvmUpgrade kernel-cross-headersUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-toolsUpgrade kernel-zfcpdumpUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade bpftoolUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-zfcpdump-coreUpgrade kernel-docUpgrade kernel-rtUpgrade kernel-modules | Sep 26, 2024 | Jul 29, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 2, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jul 29, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Sep 25, 2024 | Jul 29, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-kvmUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-headersUpgrade kernel-coreUpgrade kernel-tools-debuginfoUpgrade kernel-debug-coreUpgrade kernel-debug-debuginfoUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rtUpgrade perf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-develUpgrade python3-perfUpgrade kernel-modulesUpgrade kernel-rt-modulesUpgrade kernel-debugUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-core | Oct 2, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade dtb-xilinxUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-vanillaUpgrade dlm-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-rtUpgrade dlm-kmp-rtUpgrade dtb-armUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-devel-rtUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-docsUpgrade kernel-rt-develUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade kernel-default-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-azureUpgrade dtb-rockchipUpgrade kernel-default-baseUpgrade dtb-sprdUpgrade kernel-azure-vdsoUpgrade dtb-nvidiaUpgrade dtb-socionextUpgrade dtb-allwinnerUpgrade kselftests-kmp-defaultUpgrade dtb-mediatekUpgrade kselftests-kmp-rtUpgrade kernel-defaultUpgrade kernel-develUpgrade dtb-renesasUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-rtUpgrade kernel-rt-extraUpgrade dtb-marvellUpgrade dtb-apmUpgrade kernel-azure-extraUpgrade kernel-default-livepatchUpgrade kernel-debugUpgrade dtb-amazonUpgrade kernel-azure-develUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-lgUpgrade dtb-alteraUpgrade kernel-symsUpgrade dtb-freescaleUpgrade gfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade dtb-amdUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-develUpgrade kernel-default-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade dtb-appleUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade dtb-amlogicUpgrade ocfs2-kmp-64kbUpgrade kernel-source-rtUpgrade cluster-md-kmp-rtUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade kernel-sourceUpgrade kselftests-kmp-azureUpgrade dtb-qcomUpgrade kernel-docs-htmlUpgrade kernel-azure-optionalUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade kernel-rtUpgrade kernel-64kb-optionalUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-debug-devel | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-gkeopUpgrade linux-image-ibmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1016-azureUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1017-gcp | Nov 4, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub