In the Linux kernel, the following vulnerability has been resolved:
firmware: cs_dsp: Validate payload length before processing block
Move the payload length check in cs_dsp_load() and cs_dsp_coeff_load() to be done before the block is processed.
The check that the length of a block payload does not exceed the number of remaining bytes in the firwmware file buffer was being done near the end of the loop iteration. However, some code before that check used the length field without validating it.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-docUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-coreUpgrade kernel-toolsUpgrade kernel-zfcpdump-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernelUpgrade kernel-rt-debugUpgrade python3-perfUpgrade kernel-rt-debug-kvmUpgrade kernel-coreUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-develUpgrade kernel-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-develUpgrade perfUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-rt-devel | Sep 26, 2024 | Aug 7, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Aug 7, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Aug 7, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Sep 25, 2024 | Aug 7, 2024 |
| Rocky_linux | — | Upgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-kvmUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rtUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-debuginfoUpgrade kernel-coreUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-libs-develUpgrade perf | Oct 2, 2024 | Aug 7, 2024 |
| Suse | — | Upgrade dtb-appleUpgrade kernel-default-baseUpgrade dtb-amdUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-develUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azureUpgrade dtb-mediatekUpgrade kernel-rt_debug-vdsoUpgrade dtb-nvidiaUpgrade kernel-debugUpgrade dtb-renesasUpgrade kernel-rt_debugUpgrade kernel-devel-rtUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kselftests-kmp-rtUpgrade dlm-kmp-azureUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-extraUpgrade dtb-socionextUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-rt-extraUpgrade dtb-sprdUpgrade kernel-debug-develUpgrade reiserfs-kmp-rtUpgrade dtb-marvellUpgrade dtb-rockchipUpgrade ocfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade kernel-docsUpgrade dtb-armUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade kernel-syms-rtUpgrade kernel-rt_debug-develUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade kernel-rt-optionalUpgrade kernel-rt-develUpgrade reiserfs-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-sourceUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade kernel-default-extraUpgrade dtb-broadcomUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-source-rtUpgrade kernel-source-azureUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade kernel-symsUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-docs-htmlUpgrade kselftests-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-rtUpgrade dtb-lgUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-64kb-optionalUpgrade dtb-amazonUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-rtUpgrade dtb-apmUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatchUpgrade kernel-azure-optionalUpgrade kernel-64kbUpgrade kernel-default-base-rebuildUpgrade dtb-exynosUpgrade dtb-qcomUpgrade kernel-azure-devel | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-gkeUpgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-ibmUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-gkeop-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-genericUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-24.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1018-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-48-genericUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-ibm-lts-24.04 | Nov 4, 2024 | Aug 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub