In the Linux kernel, the following vulnerability has been resolved:
firmware: cs_dsp: Return error if block header overflows file
Return an error from cs_dsp_power_up() if a block header is longer than the amount of data left in the file.
The previous code in cs_dsp_load() and cs_dsp_load_coeff() would loop while there was enough data left in the file for a valid region. This protected against overrunning the end of the file data, but it didn't abort the file processing with an error.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-coreUpgrade python3-perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-rt-debugUpgrade kernel-zfcpdumpUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rtUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-headersUpgrade kernel-zfcpdump-devel | Sep 26, 2024 | Aug 7, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Aug 7, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Aug 7, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 25, 2024 | Aug 7, 2024 |
| Rocky_linux | — | Upgrade kernel-modulesUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-debuginfoUpgrade kernel-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-headersUpgrade kernel-rt-kvmUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernelUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-develUpgrade perfUpgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debug-devel | Oct 2, 2024 | Aug 7, 2024 |
| Suse | — | Upgrade kernel-azure-extraUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-develUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade ocfs2-kmp-rtUpgrade kernel-default-develUpgrade dtb-xilinxUpgrade dtb-caviumUpgrade kernel-azure-optionalUpgrade kernel-debugUpgrade kernel-rt-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-64kbUpgrade dtb-hisiliconUpgrade gfs2-kmp-azureUpgrade dtb-lgUpgrade gfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-broadcomUpgrade kernel-azureUpgrade kernel-devel-azureUpgrade gfs2-kmp-64kbUpgrade kernel-default-optionalUpgrade dtb-freescaleUpgrade kernel-rtUpgrade kernel-source-azureUpgrade dtb-alteraUpgrade dtb-amazonUpgrade kernel-rt-livepatchUpgrade kernel-default-livepatchUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-vdsoUpgrade kernel-symsUpgrade kernel-rt_debug-develUpgrade kernel-64kbUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-rt-vdsoUpgrade kernel-docs-htmlUpgrade kernel-source-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-source-vanillaUpgrade dtb-qcomUpgrade dtb-allwinnerUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-defaultUpgrade dtb-marvellUpgrade kernel-64kb-extraUpgrade kselftests-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-obs-qaUpgrade kernel-devel-rtUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade dtb-amlogicUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-sprdUpgrade cluster-md-kmp-defaultUpgrade dtb-armUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-rt-develUpgrade dtb-rockchipUpgrade dtb-mediatekUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-default-extraUpgrade dtb-nvidiaUpgrade kselftests-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade dtb-socionextUpgrade dtb-renesasUpgrade dtb-appleUpgrade dtb-amdUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azure-vdso | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-azureUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-awsUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-ibmUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04bUpgrade linux-image-genericUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-oem-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-ibm-classicUpgrade linux-image-azure-fde | Nov 4, 2024 | Aug 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub