CVE-2025-38330

firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache)

published July 10, 2025

CVSS
—
EPSS
0%
Percentile
6.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache)

KASAN reported out of bounds access - cs_dsp_ctl_cache_init_multiple_offsets().

The code uses mock_coeff_template.length_bytes (4 bytes) for register value

allocations. But later, this length is set to 8 bytes which causes

test code failures.

As fix, just remove the lenght override, keeping the original value 4

for all operations.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00169 · 6.0th percentile
Published
2025-07-10T08:15Z
EPSS history
Timeline
  • 10 JUL 08:15Z
    firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache)
    cvelistv5