In the Linux kernel, the following vulnerability has been resolved:
firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files
Use strnlen() instead of strlen() on the algorithm and coefficient name string arrays in V1 wmfw files.
In V1 wmfw files the name is a NUL-terminated string in a fixed-size array. cs_dsp should protect against overrunning the array if the NUL terminator is missing.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modulesUpgrade perfUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-develUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-coreUpgrade kernel-zfcpdump-develUpgrade kernel-headersUpgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade kernelUpgrade kernel-debug-modules | Sep 26, 2024 | Jul 29, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jul 29, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Sep 25, 2024 | Jul 29, 2024 |
| Rocky_linux | — | Upgrade kernel-coreUpgrade kernel-rt-develUpgrade kernel-tools-debuginfoUpgrade kernel-cross-headersUpgrade kernel-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade python3-perf-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-tools-libsUpgrade bpftool-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-develUpgrade python3-perfUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade kernel-toolsUpgrade perfUpgrade kernel-rt-debugUpgrade perf-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extra | Oct 2, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade ocfs2-kmp-rtUpgrade dtb-appleUpgrade kernel-rt_debug-develUpgrade kernel-zfcpdumpUpgrade dtb-amdUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-extraUpgrade kernel-kvmsmall-develUpgrade dtb-amlogicUpgrade kernel-source-rtUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade kselftests-kmp-azureUpgrade kernel-debugUpgrade kernel-debug-develUpgrade reiserfs-kmp-64kbUpgrade dtb-alteraUpgrade dtb-marvellUpgrade kernel-azure-develUpgrade dtb-amazonUpgrade kernel-default-livepatchUpgrade kernel-syms-azureUpgrade cluster-md-kmp-azureUpgrade dtb-broadcomUpgrade kernel-64kbUpgrade kernel-sourceUpgrade kernel-default-vdsoUpgrade kernel-azure-livepatch-develUpgrade dtb-lgUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-defaultUpgrade dtb-hisiliconUpgrade gfs2-kmp-rtUpgrade kernel-symsUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-rtUpgrade kernel-azure-optionalUpgrade kernel-docs-htmlUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade kernel-rt_debugUpgrade kernel-azure-extraUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade dtb-freescaleUpgrade dtb-qcomUpgrade kernel-default-develUpgrade kernel-develUpgrade kernel-default-base-rebuildUpgrade kernel-devel-rtUpgrade kernel-source-vanillaUpgrade dtb-armUpgrade dlm-kmp-rtUpgrade kernel-syms-rtUpgrade gfs2-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade dtb-xilinxUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-develUpgrade kselftests-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade ocfs2-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-rt-extraUpgrade kernel-default-baseUpgrade kernel-azure-vdsoUpgrade kernel-defaultUpgrade dtb-nvidiaUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-socionextUpgrade dtb-mediatekUpgrade dlm-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-azureUpgrade dtb-renesasUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-rt | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-azureUpgrade linux-image-oracleUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-oem-22.04dUpgrade linux-image-azureUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-48-genericUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1016-oemUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04c | Nov 4, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub