We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2025-38330

firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache)



Description

In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache) KASAN reported out of bounds access - cs_dsp_ctl_cache_init_multiple_offsets(). The code uses mock_coeff_template.length_bytes (4 bytes) for register value allocations. But later, this length is set to 8 bytes which causes test code failures. As fix, just remove the lenght override, keeping the original value 4 for all operations.

Reserved 2025-04-16 | Published 2025-07-10 | Updated 2025-07-11 | Assigner Linux

Product status

Default status
unaffected

9b33a4fc500cedc1adc9c0ee01e30ffd50e5887a before e3dafc64b90546eb769f33333afabd9e3e915757
affected

9b33a4fc500cedc1adc9c0ee01e30ffd50e5887a before f4ba2ea57da51d616b689c4b8826c517ff5a8523
affected

Default status
affected

6.14
affected

Any version before 6.14
unaffected

6.15.4
unaffected

6.16-rc1
unaffected

References

git.kernel.org/...c/e3dafc64b90546eb769f33333afabd9e3e915757

git.kernel.org/...c/f4ba2ea57da51d616b689c4b8826c517ff5a8523

cve.org (CVE-2025-38330)

nvd.nist.gov (CVE-2025-38330)

Download JSON

Share this page
https://cve.threatint.eu/CVE/CVE-2025-38330

Support options

Helpdesk Chat, Email, Knowledgebase