Linux Distros Unpatched Vulnerability : CVE-2024-41038

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Prevent buffer overrun when processing V2 alg headers Check that all fields...

CVE-2024-41038

CVE-2024-41038 affects the Linux kernel firmware path for cs_dsp handling of V2 WMFW headers. The issue stems from variable-length strings in the V2 algorithm header, which can shift field positions and header length, creating a risk that some fields may overflow the available firmware data buffe...