Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-38330

firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache) KASAN reported out of bounds access - cs_dsp_ctl_cache_init_multiple_offsets(). The code uses mock_coeff_template.length_bytes (4 bytes) for register value allocations. But later, this length is set to 8 bytes which causes test code failures. As fix, just remove the lenght override, keeping the original value 4 for all operations.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 9b33a4fc500cedc1adc9c0ee01e30ffd50e5887a to < e3dafc64b90546eb769f33333afabd9e3e915757affected
  • 9b33a4fc500cedc1adc9c0ee01e30ffd50e5887a to < f4ba2ea57da51d616b689c4b8826c517ff5a8523affected

Linux Linux

Default version status: affected

  • 6.14affected
  • 0 to < 6.14unaffected
  • 6.15.4 to ≤ 6.15.*unaffected
  • 6.16 to ≤ *unaffected

References