firmware: cs_dsp: Return error if block header overflows file

...

SUSE CVE-2024-42238

In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Return error if block header overflows file Return an error from csdsppowerup if a block header is longer than the amount of data left in the file. The previous code in csdspload and csdsploadcoeff would loop whi...

AZL-47595 CVE-2024-42237 affecting package kernel for versions less than 5.15.162.2-1

In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Validate payload length before processing block Move the payload length check in csdspload and csdspcoeffload to be done before the block is processed. The check that the length of a block payload does not exceed...

DEBIAN-CVE-2024-42237

In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Validate payload length before processing block Move the payload length check in csdspload and csdspcoeffload to be done before the block is processed. The check that the length of a block payload does not exceed...

DEBIAN-CVE-2024-42238

In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Return error if block header overflows file Return an error from csdsppowerup if a block header is longer than the amount of data left in the file. The previous code in csdspload and csdsploadcoeff would loop whi...

UBUNTU-CVE-2024-42237

In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Validate payload length before processing block Move the payload length check in csdspload and csdspcoeffload to be done before the block is processed. The check that the length of a block payload does not exceed...

SUSE CVE-2024-41038

In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Prevent buffer overrun when processing V2 alg headers Check that all fields of a V2 algorithm header fit into the available firmware data buffer. The wmfw V2 format introduced variable-length strings in the...

Qualcomm DSP System Code Execution

The vulnerability of the DSP microprogramming system in Qualcomm’s embedded chips lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

DEBIAN-CVE-2024-41038

In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Prevent buffer overrun when processing V2 alg headers Check that all fields of a V2 algorithm header fit into the available firmware data buffer. The wmfw V2 format introduced variable-length strings in the...

UBUNTU-CVE-2024-41038

In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Prevent buffer overrun when processing V2 alg headers Check that all fields of a V2 algorithm header fit into the available firmware data buffer. The wmfw V2 format introduced variable-length strings in the...

VulnCheck KEV: CVE-2024-43047

Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services while maintaining memory maps of HLOS memory...

GeoVision GV-DSP, GV-IPCAMD, GV-VS, and GVLX Command Injection

The vulnerability of the microprogramming software used in video surveillance systems GeoVision GV-DSP, GV-IPCAMD, GV-VS, and GVLX 4 exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote...

SUSE CVE-2022-48863

In the Linux kernel, the following vulnerability has been resolved: mISDN: Fix memory leak in dsppipelinebuild dsppipelinebuild allocates dup pointer by kstrdupcfg, but then it updates dup variable by strsep&dup, "|". As a result when it calls kfreedup, the dup variable contains NULL. Found by...

UBUNTU-CVE-2022-48863

In the Linux kernel, the following vulnerability has been resolved: mISDN: Fix memory leak in dsppipelinebuild dsppipelinebuild allocates dup pointer by kstrdupcfg, but then it updates dup variable by strsep&dup, "|". As a result when it calls kfreedup, the dup variable contains NULL. Found by...

an-website (>=22.5.13, <=22.5.18), dsp-tools (1.15.0) +5 more potentially affected by CVE-2024-6345 via setuptools (62.2.0)

setuptools PYPI version 62.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website =22.5.13, =0.0.7, =0.3.8, =0.0.1, =0.0.16 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...

dsp-tools (1.17.1), elementary-flask (>=0.0.1.dev13, <=0.0.1.dev17) +3 more potentially affected by CVE-2024-6345 via setuptools (65.2.0)

setuptools PYPI version 65.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - dsp-tools 1.17.1 - elementary-flask =0.0.1.dev13, =0.1.0, =2.2.6, =2.2.8 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW...

dicgram (>=2.0.9, <=2.1.1), dsp-metadata-gui (>=1.3.2, <=8.5.0) +1 more potentially affected by CVE-2024-6345 via setuptools (67.3.1)

setuptools PYPI version 67.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - dicgram =2.0.9, =1.3.2, =8.5.0 - renku-lock 2.3.0 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...

OESA-2024-1839 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Fix DSP oops stack dump output contents Fix @buf arg given to hexdumptobuffer and stack address used in dump error output.CVE-2021-47381 In the Linux...

SUSE CVE-2024-39491

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l56: Fix lifetime of csdsp instance The csdsp instance is initialized in the driver probe so it should be freed in the driver remove. Also fix a missing call to csdspremove in the error path of cs35l56hdacommonprob...

PT-2024-29235

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to insufficient input validation in the cs dsp coeff parse alg and cs dsp coeff parse coeff functions in the Linux kernel's cs dsp component. This can lead to a deni...