Riskcovery

CVE-2025-38329

firmware: cs_dsp: Fix OOB memory read access in KUnit test (wmfw info)

State
Published
Severity
Not scored
Published
Jul 10, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

firmware: cs_dsp: Fix OOB memory read access in KUnit test (wmfw info)

KASAN reported out of bounds access - cs_dsp_mock_wmfw_add_info(), because the source string length was rounded up to the allocation size.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5cf1b7b471803f7cc654a29ee16cb085ad69c097 to before 0000a2303ba78b6424ff15b5085b5f5098750a2eAffected
  • 5cf1b7b471803f7cc654a29ee16cb085ad69c097 to before d979b783d61f7f1f95664031b71a33afc74627b2Affected
LinuxLinux
  • 6.14Affected
  • before 6.14Not affected
  • 6.15.4 through 6.15.*Not affected
  • 6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.