In the Linux kernel, the following vulnerability has been resolved:
firmware: cs_dsp: Return error if block header overflows file
Return an error from cs_dsp_power_up() if a block header is longer than the amount of data left in the file.
The previous code in cs_dsp_load() and cs_dsp_load_coeff() would loop while there was enough data left in the file for a valid region. This protected against overrunning the end of the file data, but it didn't abort the file processing with an error.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernelUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernel-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debug-kvmUpgrade kernel-cross-headersUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-toolsUpgrade kernel-coreUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade kernel-docUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-devel | Sep 26, 2024 | Aug 7, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Aug 7, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Aug 7, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Sep 25, 2024 | Aug 7, 2024 |
| Rocky_linux | — | Upgrade kernel-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade perfUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade bpftool-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade bpftoolUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-modules | Oct 2, 2024 | Aug 7, 2024 |
| Suse | — | Upgrade kernel-azure-vdsoUpgrade dtb-nvidiaUpgrade kernel-devel-rtUpgrade dtb-armUpgrade kernel-rt-develUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-azureUpgrade dtb-apmUpgrade kernel-rt_debug-vdsoUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade dtb-appleUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-rt-extraUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-64kbUpgrade dtb-amlogicUpgrade dtb-renesasUpgrade dtb-amdUpgrade dtb-socionextUpgrade kernel-default-livepatch-develUpgrade kernel-macrosUpgrade kselftests-kmp-defaultUpgrade kernel-debug-develUpgrade reiserfs-kmp-rtUpgrade kernel-default-baseUpgrade dtb-marvellUpgrade kernel-syms-rtUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-azureUpgrade dtb-sprdUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debugUpgrade kselftests-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade dtb-rockchipUpgrade kernel-rt-livepatch-develUpgrade kernel-docsUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-default-livepatchUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade dtb-alteraUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-azureUpgrade kernel-rtUpgrade kernel-default-optionalUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade dtb-caviumUpgrade kernel-azure-develUpgrade dtb-xilinxUpgrade kernel-rt-optionalUpgrade kernel-debugUpgrade kernel-azure-optionalUpgrade kernel-azure-extraUpgrade dtb-qcomUpgrade dtb-exynosUpgrade kernel-sourceUpgrade dtb-broadcomUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-debug-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-source-rtUpgrade kernel-syms-azureUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-azureUpgrade dtb-lgUpgrade dtb-hisiliconUpgrade kernel-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-develUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-64kb-optionalUpgrade dtb-allwinnerUpgrade kernel-source-vanillaUpgrade kselftests-kmp-azureUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-kvmsmall-vdso | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-nvidia-64kUpgrade linux-image-raspiUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1016-oemUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-azure-fdeUpgrade linux-image-genericUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1017-azureUpgrade linux-image-lowlatency | Nov 4, 2024 | Aug 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub