In the Linux kernel, the following vulnerability has been resolved:
firmware: cs_dsp: Validate payload length before processing block
Move the payload length check in cs_dsp_load() and cs_dsp_coeff_load() to be done before the block is processed.
The check that the length of a block payload does not exceed the number of remaining bytes in the firwmware file buffer was being done near the end of the loop iteration. However, some code before that check used the length field without validating it.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-coreUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-docUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernelUpgrade python3-perfUpgrade kernel-rt-kvmUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-develUpgrade bpftoolUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-devel | Sep 26, 2024 | Aug 7, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 2, 2024 | Aug 7, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Aug 7, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Sep 25, 2024 | Aug 7, 2024 |
| Rocky_linux | — | Upgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-cross-headersUpgrade kernel-rt-coreUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade kernel-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade bpftoolUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfo | Oct 2, 2024 | Aug 7, 2024 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade kernel-docs-htmlUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade dtb-qcomUpgrade kernel-obs-qaUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade kernel-rtUpgrade dtb-freescaleUpgrade dlm-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-azure-livepatch-develUpgrade dtb-caviumUpgrade kernel-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatchUpgrade dtb-apmUpgrade kernel-azure-optionalUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade dtb-alteraUpgrade kernel-default-extraUpgrade dtb-xilinxUpgrade dtb-broadcomUpgrade dtb-lgUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-sourceUpgrade kselftests-kmp-azureUpgrade kernel-rt-develUpgrade kernel-default-develUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-64kbUpgrade kernel-source-rtUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade dtb-amazonUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-azure-extraUpgrade kernel-64kb-develUpgrade kernel-debug-vdsoUpgrade kernel-debugUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-develUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-rt_debugUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade dtb-amdUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatch-develUpgrade dtb-nvidiaUpgrade dtb-mediatekUpgrade dtb-socionextUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-azureUpgrade dlm-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade dtb-marvellUpgrade ocfs2-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-devel-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-armUpgrade kernel-source-vanillaUpgrade kernel-debug-develUpgrade dlm-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dtb-rockchipUpgrade kernel-rt-extraUpgrade dtb-renesas | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-ibmUpgrade linux-image-nvidia-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-awsUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-kvm | Nov 4, 2024 | Aug 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub