In the Linux kernel, the following vulnerability has been resolved:
firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files
Use strnlen() instead of strlen() on the algorithm and coefficient name string arrays in V1 wmfw files.
In V1 wmfw files the name is a NUL-terminated string in a fixed-size array. cs_dsp should protect against overrunning the array if the NUL terminator is missing.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-cross-headersUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-kvmUpgrade perfUpgrade kernel-toolsUpgrade kernel-zfcpdumpUpgrade bpftoolUpgrade kernel-docUpgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debug | Sep 26, 2024 | Jul 29, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jul 29, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 25, 2024 | Jul 29, 2024 |
| Rocky_linux | — | Upgrade perfUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debugUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade python3-perfUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade bpftoolUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modulesUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-extra | Oct 2, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade kernel-rt_debug-develUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-source-azureUpgrade dtb-amdUpgrade kernel-zfcpdumpUpgrade dtb-apmUpgrade gfs2-kmp-azureUpgrade kernel-rtUpgrade dtb-hisiliconUpgrade kernel-default-develUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-azure-extraUpgrade dtb-exynosUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-marvellUpgrade dtb-qcomUpgrade kselftests-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-64kb-optionalUpgrade dtb-caviumUpgrade dtb-alteraUpgrade dtb-broadcomUpgrade dtb-freescaleUpgrade kernel-kvmsmallUpgrade dlm-kmp-64kbUpgrade kernel-default-extraUpgrade cluster-md-kmp-rtUpgrade dtb-amlogicUpgrade kernel-64kb-develUpgrade kernel-debug-livepatch-develUpgrade kernel-source-rtUpgrade dtb-amazonUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-64kbUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade kernel-azure-optionalUpgrade gfs2-kmp-64kbUpgrade dtb-lgUpgrade kernel-obs-qaUpgrade dtb-appleUpgrade kernel-default-livepatchUpgrade kernel-default-vdsoUpgrade kernel-syms-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-azureUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade dtb-armUpgrade dlm-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-socionextUpgrade dtb-mediatekUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-rt-extraUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-azure-vdsoUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade kernel-default-base-rebuild | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-azure-fdeUpgrade linux-image-oem-24.04aUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1016-azureUpgrade linux-image-awsUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1018-awsUpgrade linux-image-oracle-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1016-gcp | Nov 4, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub