In the Linux kernel, the following vulnerability has been resolved:
firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache)
KASAN reported out of bounds access - cs_dsp_ctl_cache_init_multiple_offsets(). The code uses mock_coeff_template.length_bytes (4 bytes) for register value allocations. But later, this length is set to 8 bytes which causes test code failures.
As fix, just remove the lenght override, keeping the original value 4 for all operations.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | Jul 11, 2025 | Jul 11, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jan 27, 2026 | Jul 10, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-64k-6.14Upgrade linux-image-raspiUpgrade linux-image-6.14.0-1014-azureUpgrade linux-image-gcp-64kUpgrade linux-image-generic-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-generic-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-realtimeUpgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-realtime-6.14Upgrade linux-image-azureUpgrade linux-image-genericUpgrade linux-image-6.14.0-34-genericUpgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-6.14.0-1014-oemUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-gcpUpgrade linux-image-oem-24.04Upgrade linux-image-6.14.0-1015-awsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-6.14Upgrade linux-image-oracleUpgrade linux-image-oem-24.04bUpgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-awsUpgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-oem-24.04cUpgrade linux-image-gcp-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-virtualUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-nvidia-6.14 | Jul 14, 2025 | Jul 10, 2025 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub