In the Linux kernel, the following vulnerability has been resolved:
firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache)
KASAN reported out of bounds access - cs_dsp_ctl_cache_init_multiple_offsets(). The code uses mock_coeff_template.length_bytes (4 bytes) for register value allocations. But later, this length is set to 8 bytes which causes test code failures.
As fix, just remove the lenght override, keeping the original value 4 for all operations.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | Jul 11, 2025 | Jul 11, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jan 27, 2026 | Jul 10, 2025 |
| Ubuntu | — | Upgrade linux-image-aws-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-gcp-6.14Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-azure-nvidia-6.14Upgrade linux-image-gcpUpgrade linux-image-oem-24.04cUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-azure-nvidiaUpgrade linux-image-virtualUpgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-6.14.0-1015-awsUpgrade linux-image-oracle-64kUpgrade linux-image-azure-6.14Upgrade linux-image-realtimeUpgrade linux-image-oracle-6.14Upgrade linux-image-oem-6.14Upgrade linux-image-genericUpgrade linux-image-6.14.0-34-genericUpgrade linux-image-generic-64k-6.14Upgrade linux-image-raspiUpgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-azureUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-6.14.0-1014-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-1014-oemUpgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-raspi-6.14 | Jul 14, 2025 | Jul 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub