In the Linux kernel, the following vulnerability has been resolved:
firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files
Use strnlen() instead of strlen() on the algorithm and coefficient name string arrays in V1 wmfw files.
In V1 wmfw files the name is a NUL-terminated string in a fixed-size array. cs_dsp should protect against overrunning the array if the NUL terminator is missing.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-coreUpgrade kernel-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-docUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-rt-debug-coreUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modulesUpgrade kernel-rt-coreUpgrade kernelUpgrade kernel-rt-debug-kvmUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-devel | Sep 26, 2024 | Jul 29, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 2, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jul 29, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Sep 25, 2024 | Jul 29, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-modulesUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade python3-perfUpgrade kernel-rt-debug-develUpgrade kernel-rt-modulesUpgrade kernel-debugUpgrade perfUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfoUpgrade kernel-coreUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-coreUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-debuginfo | Oct 2, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade dtb-rockchipUpgrade dtb-socionextUpgrade reiserfs-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-default-optionalUpgrade kernel-azure-vdsoUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-vanillaUpgrade dlm-kmp-defaultUpgrade kernel-rt-optionalUpgrade dtb-nvidiaUpgrade kernel-debug-vdsoUpgrade kernel-rt-vdsoUpgrade dtb-sprdUpgrade dlm-kmp-azureUpgrade dtb-armUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade dtb-renesasUpgrade kernel-develUpgrade reiserfs-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debug-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-rtUpgrade dtb-mediatekUpgrade ocfs2-kmp-azureUpgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-azureUpgrade kernel-obs-buildUpgrade kselftests-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-64kb-extraUpgrade kernel-rt-develUpgrade reiserfs-kmp-defaultUpgrade kernel-devel-rtUpgrade dtb-exynosUpgrade dtb-qcomUpgrade kernel-docs-htmlUpgrade kernel-azure-optionalUpgrade kernel-default-develUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-broadcomUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-develUpgrade dtb-appleUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-azureUpgrade dtb-hisiliconUpgrade cluster-md-kmp-defaultUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade gfs2-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-azure-extraUpgrade kernel-sourceUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade dtb-freescaleUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-azure-develUpgrade dtb-lgUpgrade dtb-apmUpgrade ocfs2-kmp-64kbUpgrade kernel-default-extraUpgrade dtb-amlogicUpgrade kernel-64kbUpgrade kernel-macrosUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade dtb-cavium | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-oracleUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-gkeopUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-ibmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1016-oemUpgrade linux-image-oem-24.04aUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-virtualUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-48-genericUpgrade linux-image-awsUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-azureUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcp | Nov 4, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub