CVE - CVE-2024-41039

CVE-ID
CVE-2024-41039	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Fix overflow checking of wmfw header Fix the checking that firmware file buffer is large enough for the wmfw header, to prevent overrunning the buffer. The original code tested that the firmware data buffer contained enough bytes for the sums of the size of the structs wmfw_header + wmfw_adsp1_sizes + wmfw_footer But wmfw_adsp1_sizes is only used on ADSP1 firmware. For ADSP2 and Halo Core the equivalent struct is wmfw_adsp2_sizes, which is 4 bytes longer. So the length check didn't guarantee that there are enough bytes in the firmware buffer for a header with wmfw_adsp2_sizes. This patch splits the length check into three separate parts. Each of the wmfw_header, wmfw_adsp?_sizes and wmfw_footer are checked separately before they are used.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/3019b86bce16fbb5bc1964f3544d0ce7d0137278 URL:https://git.kernel.org/stable/c/3019b86bce16fbb5bc1964f3544d0ce7d0137278 MISC:https://git.kernel.org/stable/c/49a79f344d0a17c6a5eef53716cc76fcdbfca9ba URL:https://git.kernel.org/stable/c/49a79f344d0a17c6a5eef53716cc76fcdbfca9ba MISC:https://git.kernel.org/stable/c/9c9877a96e033bf6c6470b3b4f06106d91ace11e URL:https://git.kernel.org/stable/c/9c9877a96e033bf6c6470b3b4f06106d91ace11e MISC:https://git.kernel.org/stable/c/fd035f0810b33c2a8792effdb82bf35920221565 URL:https://git.kernel.org/stable/c/fd035f0810b33c2a8792effdb82bf35920221565
Assigning CNA
kernel.org
Date Record Created
20240712	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240712)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)