In the Linux kernel, the following vulnerability has been resolved:
firmware: cs_dsp: Return error if block header overflows file
Return an error from cs_dsp_power_up() if a block header is longer than the amount of data left in the file.
The previous code in cs_dsp_load() and cs_dsp_load_coeff() would loop while there was enough data left in the file for a valid region. This protected against overrunning the end of the file data, but it didn't abort the file processing with an error.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-perfUpgrade kernel-docUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade kernel-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade bpftoolUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade perfUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-cross-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-tools-libs-develUpgrade kernel-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-devel | Sep 26, 2024 | Aug 7, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Aug 7, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Aug 7, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Sep 25, 2024 | Aug 7, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-rt-debugUpgrade perf-debuginfoUpgrade kernel-rt-coreUpgrade kernelUpgrade python3-perfUpgrade kernel-develUpgrade kernel-rt-develUpgrade perfUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-debug-coreUpgrade kernel-modulesUpgrade kernel-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade bpftoolUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt | Oct 2, 2024 | Aug 7, 2024 |
| Suse | — | Upgrade dlm-kmp-azureUpgrade dtb-armUpgrade dtb-amlogicUpgrade kernel-debug-develUpgrade dtb-appleUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade reiserfs-kmp-rtUpgrade dtb-amdUpgrade dtb-socionextUpgrade kernel-default-extraUpgrade kernel-rt_debugUpgrade dtb-renesasUpgrade kernel-default-baseUpgrade dtb-apmUpgrade dlm-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-rt-extraUpgrade dtb-marvellUpgrade kernel-64kb-develUpgrade dlm-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-docsUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-rtUpgrade dtb-mediatekUpgrade kernel-rt-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-nvidiaUpgrade kernel-devel-rtUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-azureUpgrade dtb-caviumUpgrade dtb-xilinxUpgrade ocfs2-kmp-defaultUpgrade dtb-qcomUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-rtUpgrade dtb-broadcomUpgrade kernel-azureUpgrade gfs2-kmp-rtUpgrade kernel-azure-optionalUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade kselftests-kmp-azureUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatchUpgrade dtb-alteraUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-develUpgrade kernel-azure-develUpgrade kernel-azure-extraUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade dtb-exynosUpgrade kernel-debugUpgrade kernel-devel-azureUpgrade kernel-64kb-optionalUpgrade kernel-source-vanillaUpgrade dtb-allwinnerUpgrade kernel-rtUpgrade dtb-hisiliconUpgrade kernel-default-optionalUpgrade dtb-lgUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-default-vdsoUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-source-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-azureUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-ibmUpgrade linux-image-genericUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-fdeUpgrade linux-image-oem-24.04aUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-gcpUpgrade linux-image-nvidia | Nov 4, 2024 | Aug 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub