CVE - CVE-2024-42238

CVE-ID
CVE-2024-42238	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Return error if block header overflows file Return an error from cs_dsp_power_up() if a block header is longer than the amount of data left in the file. The previous code in cs_dsp_load() and cs_dsp_load_coeff() would loop while there was enough data left in the file for a valid region. This protected against overrunning the end of the file data, but it didn't abort the file processing with an error.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/6eabd23383805725eff416c203688b7a390d4153 URL:https://git.kernel.org/stable/c/6eabd23383805725eff416c203688b7a390d4153 MISC:https://git.kernel.org/stable/c/90ab191b7d181057d71234e8632e06b5844ac38e URL:https://git.kernel.org/stable/c/90ab191b7d181057d71234e8632e06b5844ac38e MISC:https://git.kernel.org/stable/c/959fe01e85b7241e3ec305d657febbe82da16a02 URL:https://git.kernel.org/stable/c/959fe01e85b7241e3ec305d657febbe82da16a02 MISC:https://git.kernel.org/stable/c/b8be70566b33abbd0180105070b4c67cfef8c44f URL:https://git.kernel.org/stable/c/b8be70566b33abbd0180105070b4c67cfef8c44f
Assigning CNA
kernel.org
Date Record Created
20240730	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240730)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)