In the Linux kernel, the following vulnerability has been resolved:
firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache)
KASAN reported out of bounds access - cs_dsp_ctl_cache_init_multiple_offsets(). The code uses mock_coeff_template.length_bytes (4 bytes) for register value allocations. But later, this length is set to 8 bytes which causes test code failures.
As fix, just remove the lenght override, keeping the original value 4 for all operations.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | Jul 11, 2025 | Jul 11, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Jan 27, 2026 | Jul 10, 2025 |
| Ubuntu | — | Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.14.0-34-genericUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-1014-oemUpgrade linux-image-genericUpgrade linux-image-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-generic-64k-6.14Upgrade linux-image-raspiUpgrade linux-image-oem-6.14Upgrade linux-image-6.14.0-1014-azureUpgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-azureUpgrade linux-image-raspi-6.14Upgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-generic-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-gcp-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-gcpUpgrade linux-image-oem-24.04bUpgrade linux-image-azure-nvidiaUpgrade linux-image-azure-nvidia-6.14Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-gcp-6.14Upgrade linux-image-aws-64k-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-aws-64kUpgrade linux-image-virtualUpgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-oem-24.04Upgrade linux-image-awsUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-6.14.0-1015-awsUpgrade linux-image-oem-24.04a | Jul 14, 2025 | Jul 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub