In the Linux kernel, the following vulnerability has been resolved:
firmware: cs_dsp: Validate payload length before processing block
Move the payload length check in cs_dsp_load() and cs_dsp_coeff_load() to be done before the block is processed.
The check that the length of a block payload does not exceed the number of remaining bytes in the firwmware file buffer was being done near the end of the loop iteration. However, some code before that check used the length field without validating it.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade kernel-docUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-zfcpdumpUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debugUpgrade bpftoolUpgrade kernel-debug-coreUpgrade kernel-rt-modules-extraUpgrade perfUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-headersUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-develUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-devel | Sep 26, 2024 | Aug 7, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Aug 7, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Aug 7, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 25, 2024 | Aug 7, 2024 |
| Rocky_linux | — | Upgrade kernel-develUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade perf-debuginfoUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-toolsUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-modulesUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-rtUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade bpftoolUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade python3-perf-debuginfoUpgrade kernel-modulesUpgrade kernel-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-debuginfo | Oct 2, 2024 | Aug 7, 2024 |
| Suse | — | Upgrade kernel-obs-buildUpgrade dtb-allwinnerUpgrade kselftests-kmp-rtUpgrade kernel-debug-vdsoUpgrade dlm-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-defaultUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-default-baseUpgrade kernel-debugUpgrade kernel-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-rt-vdsoUpgrade kernel-syms-rtUpgrade dtb-marvellUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-docsUpgrade ocfs2-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-mediatekUpgrade dtb-nvidiaUpgrade kernel-source-vanillaUpgrade kernel-debug-develUpgrade reiserfs-kmp-azureUpgrade dtb-socionextUpgrade kernel-rt_debug-vdsoUpgrade dtb-rockchipUpgrade reiserfs-kmp-rtUpgrade kernel-develUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-renesasUpgrade kernel-64kb-develUpgrade dtb-armUpgrade kernel-rt_debugUpgrade dtb-appleUpgrade dtb-amdUpgrade dtb-sprdUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-64kbUpgrade kernel-macrosUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-docs-htmlUpgrade kernel-obs-qaUpgrade gfs2-kmp-azureUpgrade dtb-qcomUpgrade dtb-caviumUpgrade kernel-symsUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-source-azureUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-64kb-livepatch-develUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-apmUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade kernel-syms-azureUpgrade kernel-default-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-rtUpgrade kernel-default-vdsoUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade dtb-amazonUpgrade cluster-md-kmp-defaultUpgrade dtb-lgUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-rt-develUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-azureUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade dtb-xilinxUpgrade dtb-altera | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gkeopUpgrade linux-image-gkeop-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-nvidia-64kUpgrade linux-image-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-oem-22.04Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-virtualUpgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-awsUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-48-generic | Nov 4, 2024 | Aug 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub