CVE-2024-42238

Summary

In the Linux kernel, the following vulnerability has been resolved:

firmware: cs_dsp: Return error if block header overflows file

Return an error from cs_dsp_power_up() if a block header is longer than the amount of data left in the file.

The previous code in cs_dsp_load() and cs_dsp_load_coeff() would loop while there was enough data left in the file for a valid region. This protected against overrunning the end of the file data, but it didn't abort the file processing with an error.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxf6bc909e7673c30abcbdb329e7d0aa2e83c103d7 < b8be70566b33abbd0180105070b4c67cfef8c44faffected
LinuxLinuxf6bc909e7673c30abcbdb329e7d0aa2e83c103d7 < 90ab191b7d181057d71234e8632e06b5844ac38eaffected
LinuxLinuxf6bc909e7673c30abcbdb329e7d0aa2e83c103d7 < 6eabd23383805725eff416c203688b7a390d4153affected
LinuxLinuxf6bc909e7673c30abcbdb329e7d0aa2e83c103d7 < 959fe01e85b7241e3ec305d657febbe82da16a02affected
LinuxLinux5.16affected
LinuxLinux0 < 5.16unaffected
LinuxLinux6.1.100 <= 6.1.*unaffected
LinuxLinux6.6.41 <= 6.6.*unaffected
LinuxLinux6.9.10 <= 6.9.*unaffected
LinuxLinux6.10 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References