Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-42238
HistoryAug 07, 2024 - 3:14 p.m.

CVE-2024-42238 firmware: cs_dsp: Return error if block header overflows file

2024-08-0715:14:26
Linux
github.com
2
linux kernel
firmware
cs_dsp
vulnerability
resolution
file overflow

AI Score

7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

firmware: cs_dsp: Return error if block header overflows file

Return an error from cs_dsp_power_up() if a block header is longer
than the amount of data left in the file.

The previous code in cs_dsp_load() and cs_dsp_load_coeff() would loop
while there was enough data left in the file for a valid region. This
protected against overrunning the end of the file data, but it didn’t
abort the file processing with an error.

AI Score

7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial