CVE-2024-41038 firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers
A buffer overrun in the Linux kernel's cs_dsp firmware driver allows attackers to cause memory corruption, potentially leading to code execution or system crashes.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2024-41038?
CVE-2024-41038 is a high-severity memory corruption vulnerability in Linux kernel, published on 29 Jul 2024. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
In the Linux kernel, the following vulnerability has been resolved:
firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers
Check that all fields of a V2 algorithm header fit into the available firmware data buffer.
The wmfw V2 format introduced variable-length strings in the algorithm block header. This means the overall header length is variable, and the position of most fields varies depending on the length of the string fields. Each field must be checked to ensure that it does not overflow the firmware data buffer.
As this ia bugfix patch, the fixes avoid making any significant change to the existing code. This makes it easier to review and less likely to introduce new bugs.
Weakness: CWE-120
Which versions are affected by CVE-2024-41038?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-41038?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2024-41038 being exploited?
There is no known exploitation of CVE-2024-41038 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-47489, BELL-CVE-2024-41038, DEBIAN-CVE-2024-41038, GHSA-8qxj-f84c-r77w, UBUNTU-CVE-2024-41038.