In the Linux kernel, the following vulnerability has been resolved:
firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files
Use strnlen() instead of strlen() on the algorithm and coefficient name string arrays in V1 wmfw files.
In V1 wmfw files the name is a NUL-terminated string in a fixed-size array. cs_dsp should protect against overrunning the array if the NUL terminator is missing.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-docUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade bpftoolUpgrade perfUpgrade kernel-zfcpdumpUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-debug-coreUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-rt-debug-kvmUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade kernel-zfcpdump-develUpgrade kernel-headersUpgrade kernel-rt-debug-devel | Sep 26, 2024 | Jul 29, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jul 29, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Sep 25, 2024 | Jul 29, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-coreUpgrade kernel-rt-kvmUpgrade kernel-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernelUpgrade kernel-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-cross-headersUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-modulesUpgrade kernel-debugUpgrade perf | Oct 2, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade reiserfs-kmp-defaultUpgrade kernel-azureUpgrade kernel-obs-buildUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-rt-livepatchUpgrade dtb-allwinnerUpgrade dtb-rockchipUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-rt-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-azure-vdsoUpgrade dtb-sprdUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-xilinxUpgrade dlm-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-syms-rtUpgrade dtb-armUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade kernel-64kb-extraUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-docsUpgrade dtb-mediatekUpgrade dtb-socionextUpgrade kernel-develUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-renesasUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debugUpgrade dtb-lgUpgrade kernel-rt_debug-develUpgrade kernel-default-develUpgrade dtb-qcomUpgrade gfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-azure-livepatch-develUpgrade dtb-appleUpgrade dtb-broadcomUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-azure-extraUpgrade dtb-exynosUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade dtb-amlogicUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-debugUpgrade kernel-azure-develUpgrade dtb-marvellUpgrade dtb-apmUpgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade dtb-alteraUpgrade kernel-source-rtUpgrade kselftests-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade gfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amdUpgrade ocfs2-kmp-rtUpgrade kernel-azure-optionalUpgrade dtb-freescaleUpgrade dtb-cavium | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-azureUpgrade linux-image-gcpUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oracle-64kUpgrade linux-image-virtualUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04cUpgrade linux-image-awsUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-oracleUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-gkeop-6.8Upgrade linux-image-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-oem-22.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-oem-24.04 | Nov 4, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub