CVE-2025-38330

firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache)

State
Published
Severity
Not scored
Published
Jul 10, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache)

KASAN reported out of bounds access - cs_dsp_ctl_cache_init_multiple_offsets(). The code uses mock_coeff_template.length_bytes (4 bytes) for register value allocations. But later, this length is set to 8 bytes which causes test code failures.

As fix, just remove the lenght override, keeping the original value 4 for all operations.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 9b33a4fc500cedc1adc9c0ee01e30ffd50e5887a to before e3dafc64b90546eb769f33333afabd9e3e915757Affected
  • 9b33a4fc500cedc1adc9c0ee01e30ffd50e5887a to before f4ba2ea57da51d616b689c4b8826c517ff5a8523Affected
LinuxLinux
  • 6.14Affected
  • before 6.14Not affected
  • 6.15.4 through 6.15.*Not affected
  • 6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.