https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 20:13:48 +0000 https://vulnerability.circl.lu/vuln/cve-2024-41039 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>firmware: cs_dsp: Fix overflow checking of wmfw header</p> <p>Fix the checking that firmware file buffer is large enough for the wmfw header, to prevent overrunning the buffer.</p> <p>The original code tested that the firmware data buffer contained enough bytes for the sums of the size of the structs</p> <p>wmfw_header + wmfw_adsp1_sizes + wmfw_footer</p> <p>But wmfw_adsp1_sizes is only used on ADSP1 firmware. For ADSP2 and Halo Core the equivalent struct is wmfw_adsp2_sizes, which is 4 bytes longer. So the length check didn&#39;t guarantee that there are enough bytes in the firmware buffer for a header with wmfw_adsp2_sizes.</p> <p>This patch splits the length check into three separate parts. Each of the wmfw_header, wmfw_adsp?_sizes and wmfw_footer are checked separately before they are used.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>firmware: cs_dsp: Fix overflow checking of wmfw header</p> <p>Fix the checking that firmware file buffer is large enough for the wmfw header, to prevent overrunning the buffer.</p> <p>The original code tested that the firmware data buffer contained enough bytes for the sums of the size of the structs</p> <p>wmfw_header + wmfw_adsp1_sizes + wmfw_footer</p> <p>But wmfw_adsp1_sizes is only used on ADSP1 firmware. For ADSP2 and Halo Core the equivalent struct is wmfw_adsp2_sizes, which is 4 bytes longer. So the length check didn&#39;t guarantee that there are enough bytes in the firmware buffer for a header with wmfw_adsp2_sizes.</p> <p>This patch splits the length check into three separate parts. Each of the wmfw_header, wmfw_adsp?_sizes and wmfw_footer are checked separately before they are used.</p> https://vulnerability.circl.lu/vuln/cve-2024-41039