CVE-2024-41038

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-41038
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-41038.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-41038
Downstream
Related
Published
2024-07-29T14:31:52.415Z
Modified
2025-11-20T05:29:40.205287Z
Summary
firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers
Details

In the Linux kernel, the following vulnerability has been resolved:

firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers

Check that all fields of a V2 algorithm header fit into the available firmware data buffer.

The wmfw V2 format introduced variable-length strings in the algorithm block header. This means the overall header length is variable, and the position of most fields varies depending on the length of the string fields. Each field must be checked to ensure that it does not overflow the firmware data buffer.

As this ia bugfix patch, the fixes avoid making any significant change to the existing code. This makes it easier to review and less likely to introduce new bugs.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
f6bc909e7673c30abcbdb329e7d0aa2e83c103d7
Fixed
6619aa48a011364e9f29083cc76368e6acfe5b11
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
f6bc909e7673c30abcbdb329e7d0aa2e83c103d7
Fixed
76ea8e13aaefdfda6e5601323d6ea5340359dcfa
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
f6bc909e7673c30abcbdb329e7d0aa2e83c103d7
Fixed
014239b9971d79421a0ba652579e1ca1b7b57b6d
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
f6bc909e7673c30abcbdb329e7d0aa2e83c103d7
Fixed
2163aff6bebbb752edf73f79700f5e2095f3559e

Affected versions

v5.*

v5.15
v5.15-rc2
v5.15-rc3
v5.15-rc4
v5.15-rc5
v5.15-rc6
v5.15-rc7
v5.16
v5.16-rc1
v5.16-rc2
v5.16-rc3
v5.16-rc4
v5.16-rc5
v5.16-rc6
v5.16-rc7
v5.16-rc8
v5.17
v5.17-rc1
v5.17-rc2
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.19
v5.19-rc1
v5.19-rc2
v5.19-rc3
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8

v6.*

v6.0
v6.0-rc1
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.1
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.1.1
v6.1.10
v6.1.11
v6.1.12
v6.1.13
v6.1.14
v6.1.15
v6.1.16
v6.1.17
v6.1.18
v6.1.19
v6.1.2
v6.1.20
v6.1.21
v6.1.22
v6.1.23
v6.1.24
v6.1.25
v6.1.26
v6.1.27
v6.1.28
v6.1.29
v6.1.3
v6.1.30
v6.1.31
v6.1.32
v6.1.33
v6.1.34
v6.1.35
v6.1.36
v6.1.37
v6.1.38
v6.1.39
v6.1.4
v6.1.40
v6.1.41
v6.1.42
v6.1.43
v6.1.44
v6.1.45
v6.1.46
v6.1.47
v6.1.48
v6.1.49
v6.1.5
v6.1.50
v6.1.51
v6.1.52
v6.1.53
v6.1.54
v6.1.55
v6.1.56
v6.1.57
v6.1.58
v6.1.59
v6.1.6
v6.1.60
v6.1.61
v6.1.62
v6.1.63
v6.1.64
v6.1.65
v6.1.66
v6.1.67
v6.1.68
v6.1.69
v6.1.7
v6.1.70
v6.1.71
v6.1.72
v6.1.73
v6.1.74
v6.1.75
v6.1.76
v6.1.77
v6.1.78
v6.1.79
v6.1.8
v6.1.80
v6.1.81
v6.1.82
v6.1.83
v6.1.84
v6.1.85
v6.1.86
v6.1.87
v6.1.88
v6.1.89
v6.1.9
v6.1.90
v6.1.91
v6.1.92
v6.1.93
v6.1.94
v6.1.95
v6.1.96
v6.1.97
v6.1.98
v6.1.99
v6.10-rc1
v6.10-rc2
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.21
v6.6.22
v6.6.23
v6.6.24
v6.6.25
v6.6.26
v6.6.27
v6.6.28
v6.6.29
v6.6.3
v6.6.30
v6.6.31
v6.6.32
v6.6.33
v6.6.34
v6.6.35
v6.6.36
v6.6.37
v6.6.38
v6.6.39
v6.6.4
v6.6.40
v6.6.5
v6.6.6
v6.6.7
v6.6.8
v6.6.9
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7
v6.9.1
v6.9.2
v6.9.3
v6.9.4
v6.9.5
v6.9.6
v6.9.7
v6.9.8
v6.9.9

Database specific

vanir_signatures

[
    {
        "signature_type": "Line",
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "302535473224740329979257828318202427884",
                "47161228136916583389651447001619225979",
                "281220477157199334001236338679625799929",
                "214476254531557119746762040526704188204",
                "257298282125229479911983219725559397093",
                "216619482238430744705604351290969687010",
                "210952407595067230272731611216657999530",
                "56663622667902661650297340258029737751",
                "87925144340690945514931972502458888020",
                "245962849974629207584766675566107337062",
                "6640938504356384535625393526210249",
                "230819785430963255975090186724379591128",
                "43217754750219358476249520256112513603",
                "184777014093369906117725163656899385253",
                "234286845245421602319544785548443184899",
                "238237215111980918867318971676102469862",
                "235411462526443547691419736793272222234",
                "29860096413300333977689021784619395808",
                "307165737978708578213841322971201169568",
                "199193563080088995927870409724328579679",
                "108049583344397531024893288941173186147",
                "199534963061490532371310380524143612638",
                "89582545178771476009898376846037548379",
                "1210002940173882864674209677623173940",
                "89512913474503318154634931876854221282",
                "185173035725853388156040619549187635213",
                "260866314401500272208534697778067482797",
                "203329086530426778346968357943866957871",
                "122428274997355347990296185227387764481",
                "290434285888836716439520089230934952534",
                "326220037032489635916602324084551840382",
                "95899842746094782830162675285879853516",
                "320877814490028842209203504526483697429",
                "180996430025501196841781386014556373815",
                "75617147953475543061365146900300358228",
                "205163752289590128221893117893078999054",
                "277704732293632829368791121975107463064",
                "315725405121651448377203270666397280530",
                "87161149820643948828822645480707861434",
                "153504764215547719790195105095233584759",
                "310701520044142227911709878246318247183",
                "273005915635055084897029909523212050361",
                "191756968641900778983885619328756734732",
                "231913418475417496405080543507722967923",
                "239788368423870632726202887954751823267",
                "167489649927371604090124716147177235903",
                "235769897525706279937219379146198959713",
                "14093064773035136046900398712105290473",
                "305827516323278040797297688836537264730",
                "218633851329334101144925947441626773776",
                "137451235563450928376793618028288871180",
                "112314866947726539845208220763508195554",
                "288780173515398839063257418388113715926",
                "11227971027702932148703560022391119687",
                "287250604247510279790309215411963952896",
                "173695966434545077787549318505661132040",
                "60403342162355175004679778365685302434",
                "96321279450449511315013087041068590460",
                "47539186479106999367788665360693922076",
                "291080703300930521724306813207119797193",
                "116799636889719334953211713780295442124",
                "261516561042428774317157455892227651054",
                "245902050430435944888563561646552948512",
                "30432538466354987516190240465221129680",
                "195639207982640997736721144652084484307",
                "96935734094970963166642452690003026618",
                "188786515580918497257357957129189858864",
                "247160993059460557640729451603601895205",
                "128796568311854991371436659873570585847",
                "121450372433711144900343225728509249497",
                "143110249801395683417873959967301882556",
                "9442636808240473422170350041545139512",
                "212577362392528115914147394735468192146",
                "46118249536172861307039464675573263024",
                "73558330998069049328696820965465224132",
                "106416264314375084054030583149407171194",
                "121492739381763455632462399529815291352",
                "122486983818072623548205402469381540798",
                "293399907366817195781056308602557947065",
                "56636550661558499893311970357340194953",
                "330984048068593860754886270018768176045"
            ],
            "threshold": 0.9
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@014239b9971d79421a0ba652579e1ca1b7b57b6d",
        "target": {
            "file": "drivers/firmware/cirrus/cs_dsp.c"
        },
        "id": "CVE-2024-41038-0c70dbed"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "length": 341.0,
            "function_hash": "34907605540214209512714271372415009848"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@014239b9971d79421a0ba652579e1ca1b7b57b6d",
        "target": {
            "file": "drivers/firmware/cirrus/cs_dsp.c",
            "function": "cs_dsp_coeff_parse_string"
        },
        "id": "CVE-2024-41038-15a206a0"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "length": 1711.0,
            "function_hash": "30494002500202634419193403004792062582"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2163aff6bebbb752edf73f79700f5e2095f3559e",
        "target": {
            "file": "drivers/firmware/cirrus/cs_dsp.c",
            "function": "cs_dsp_coeff_parse_coeff"
        },
        "id": "CVE-2024-41038-183368b6"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "length": 873.0,
            "function_hash": "79423649848494561721540673691435445070"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6619aa48a011364e9f29083cc76368e6acfe5b11",
        "target": {
            "file": "drivers/firmware/cirrus/cs_dsp.c",
            "function": "cs_dsp_coeff_parse_alg"
        },
        "id": "CVE-2024-41038-2f2433fa"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "302535473224740329979257828318202427884",
                "47161228136916583389651447001619225979",
                "281220477157199334001236338679625799929",
                "214476254531557119746762040526704188204",
                "257298282125229479911983219725559397093",
                "216619482238430744705604351290969687010",
                "210952407595067230272731611216657999530",
                "56663622667902661650297340258029737751",
                "87925144340690945514931972502458888020",
                "245962849974629207584766675566107337062",
                "6640938504356384535625393526210249",
                "230819785430963255975090186724379591128",
                "43217754750219358476249520256112513603",
                "184777014093369906117725163656899385253",
                "234286845245421602319544785548443184899",
                "238237215111980918867318971676102469862",
                "235411462526443547691419736793272222234",
                "29860096413300333977689021784619395808",
                "307165737978708578213841322971201169568",
                "199193563080088995927870409724328579679",
                "108049583344397531024893288941173186147",
                "199534963061490532371310380524143612638",
                "89582545178771476009898376846037548379",
                "1210002940173882864674209677623173940",
                "89512913474503318154634931876854221282",
                "185173035725853388156040619549187635213",
                "260866314401500272208534697778067482797",
                "203329086530426778346968357943866957871",
                "122428274997355347990296185227387764481",
                "290434285888836716439520089230934952534",
                "326220037032489635916602324084551840382",
                "95899842746094782830162675285879853516",
                "320877814490028842209203504526483697429",
                "180996430025501196841781386014556373815",
                "75617147953475543061365146900300358228",
                "205163752289590128221893117893078999054",
                "277704732293632829368791121975107463064",
                "315725405121651448377203270666397280530",
                "87161149820643948828822645480707861434",
                "153504764215547719790195105095233584759",
                "310701520044142227911709878246318247183",
                "273005915635055084897029909523212050361",
                "191756968641900778983885619328756734732",
                "231913418475417496405080543507722967923",
                "239788368423870632726202887954751823267",
                "167489649927371604090124716147177235903",
                "235769897525706279937219379146198959713",
                "14093064773035136046900398712105290473",
                "305827516323278040797297688836537264730",
                "218633851329334101144925947441626773776",
                "137451235563450928376793618028288871180",
                "112314866947726539845208220763508195554",
                "288780173515398839063257418388113715926",
                "11227971027702932148703560022391119687",
                "287250604247510279790309215411963952896",
                "173695966434545077787549318505661132040",
                "60403342162355175004679778365685302434",
                "96321279450449511315013087041068590460",
                "47539186479106999367788665360693922076",
                "291080703300930521724306813207119797193",
                "116799636889719334953211713780295442124",
                "261516561042428774317157455892227651054",
                "245902050430435944888563561646552948512",
                "30432538466354987516190240465221129680",
                "195639207982640997736721144652084484307",
                "96935734094970963166642452690003026618",
                "188786515580918497257357957129189858864",
                "247160993059460557640729451603601895205",
                "128796568311854991371436659873570585847",
                "121450372433711144900343225728509249497",
                "143110249801395683417873959967301882556",
                "9442636808240473422170350041545139512",
                "212577362392528115914147394735468192146",
                "46118249536172861307039464675573263024",
                "73558330998069049328696820965465224132",
                "106416264314375084054030583149407171194",
                "121492739381763455632462399529815291352",
                "122486983818072623548205402469381540798",
                "293399907366817195781056308602557947065",
                "56636550661558499893311970357340194953",
                "330984048068593860754886270018768176045"
            ],
            "threshold": 0.9
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6619aa48a011364e9f29083cc76368e6acfe5b11",
        "target": {
            "file": "drivers/firmware/cirrus/cs_dsp.c"
        },
        "id": "CVE-2024-41038-3390c319"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "length": 1711.0,
            "function_hash": "30494002500202634419193403004792062582"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@014239b9971d79421a0ba652579e1ca1b7b57b6d",
        "target": {
            "file": "drivers/firmware/cirrus/cs_dsp.c",
            "function": "cs_dsp_coeff_parse_coeff"
        },
        "id": "CVE-2024-41038-4c418cc7"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "length": 1433.0,
            "function_hash": "122428651374265067191718714646454142791"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@76ea8e13aaefdfda6e5601323d6ea5340359dcfa",
        "target": {
            "file": "drivers/firmware/cirrus/cs_dsp.c",
            "function": "cs_dsp_parse_coeff"
        },
        "id": "CVE-2024-41038-4ded6fa3"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "length": 1711.0,
            "function_hash": "30494002500202634419193403004792062582"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@76ea8e13aaefdfda6e5601323d6ea5340359dcfa",
        "target": {
            "file": "drivers/firmware/cirrus/cs_dsp.c",
            "function": "cs_dsp_coeff_parse_coeff"
        },
        "id": "CVE-2024-41038-5b10f04c"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "length": 873.0,
            "function_hash": "79423649848494561721540673691435445070"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2163aff6bebbb752edf73f79700f5e2095f3559e",
        "target": {
            "file": "drivers/firmware/cirrus/cs_dsp.c",
            "function": "cs_dsp_coeff_parse_alg"
        },
        "id": "CVE-2024-41038-7534de4a"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "302535473224740329979257828318202427884",
                "47161228136916583389651447001619225979",
                "281220477157199334001236338679625799929",
                "214476254531557119746762040526704188204",
                "257298282125229479911983219725559397093",
                "216619482238430744705604351290969687010",
                "210952407595067230272731611216657999530",
                "56663622667902661650297340258029737751",
                "87925144340690945514931972502458888020",
                "245962849974629207584766675566107337062",
                "6640938504356384535625393526210249",
                "230819785430963255975090186724379591128",
                "43217754750219358476249520256112513603",
                "184777014093369906117725163656899385253",
                "234286845245421602319544785548443184899",
                "238237215111980918867318971676102469862",
                "235411462526443547691419736793272222234",
                "29860096413300333977689021784619395808",
                "307165737978708578213841322971201169568",
                "199193563080088995927870409724328579679",
                "108049583344397531024893288941173186147",
                "199534963061490532371310380524143612638",
                "89582545178771476009898376846037548379",
                "1210002940173882864674209677623173940",
                "89512913474503318154634931876854221282",
                "185173035725853388156040619549187635213",
                "260866314401500272208534697778067482797",
                "203329086530426778346968357943866957871",
                "122428274997355347990296185227387764481",
                "290434285888836716439520089230934952534",
                "326220037032489635916602324084551840382",
                "95899842746094782830162675285879853516",
                "320877814490028842209203504526483697429",
                "180996430025501196841781386014556373815",
                "75617147953475543061365146900300358228",
                "205163752289590128221893117893078999054",
                "277704732293632829368791121975107463064",
                "315725405121651448377203270666397280530",
                "87161149820643948828822645480707861434",
                "153504764215547719790195105095233584759",
                "310701520044142227911709878246318247183",
                "273005915635055084897029909523212050361",
                "191756968641900778983885619328756734732",
                "231913418475417496405080543507722967923",
                "239788368423870632726202887954751823267",
                "167489649927371604090124716147177235903",
                "235769897525706279937219379146198959713",
                "14093064773035136046900398712105290473",
                "305827516323278040797297688836537264730",
                "218633851329334101144925947441626773776",
                "137451235563450928376793618028288871180",
                "112314866947726539845208220763508195554",
                "288780173515398839063257418388113715926",
                "11227971027702932148703560022391119687",
                "287250604247510279790309215411963952896",
                "173695966434545077787549318505661132040",
                "60403342162355175004679778365685302434",
                "96321279450449511315013087041068590460",
                "47539186479106999367788665360693922076",
                "291080703300930521724306813207119797193",
                "116799636889719334953211713780295442124",
                "261516561042428774317157455892227651054",
                "245902050430435944888563561646552948512",
                "30432538466354987516190240465221129680",
                "195639207982640997736721144652084484307",
                "96935734094970963166642452690003026618",
                "188786515580918497257357957129189858864",
                "247160993059460557640729451603601895205",
                "128796568311854991371436659873570585847",
                "121450372433711144900343225728509249497",
                "143110249801395683417873959967301882556",
                "9442636808240473422170350041545139512",
                "212577362392528115914147394735468192146",
                "46118249536172861307039464675573263024",
                "73558330998069049328696820965465224132",
                "106416264314375084054030583149407171194",
                "121492739381763455632462399529815291352",
                "122486983818072623548205402469381540798",
                "293399907366817195781056308602557947065",
                "56636550661558499893311970357340194953",
                "330984048068593860754886270018768176045"
            ],
            "threshold": 0.9
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2163aff6bebbb752edf73f79700f5e2095f3559e",
        "target": {
            "file": "drivers/firmware/cirrus/cs_dsp.c"
        },
        "id": "CVE-2024-41038-789b9557"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "length": 873.0,
            "function_hash": "79423649848494561721540673691435445070"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@76ea8e13aaefdfda6e5601323d6ea5340359dcfa",
        "target": {
            "file": "drivers/firmware/cirrus/cs_dsp.c",
            "function": "cs_dsp_coeff_parse_alg"
        },
        "id": "CVE-2024-41038-7b679853"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "length": 341.0,
            "function_hash": "34907605540214209512714271372415009848"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2163aff6bebbb752edf73f79700f5e2095f3559e",
        "target": {
            "file": "drivers/firmware/cirrus/cs_dsp.c",
            "function": "cs_dsp_coeff_parse_string"
        },
        "id": "CVE-2024-41038-8703f145"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "length": 341.0,
            "function_hash": "34907605540214209512714271372415009848"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@76ea8e13aaefdfda6e5601323d6ea5340359dcfa",
        "target": {
            "file": "drivers/firmware/cirrus/cs_dsp.c",
            "function": "cs_dsp_coeff_parse_string"
        },
        "id": "CVE-2024-41038-93c7d162"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "length": 873.0,
            "function_hash": "79423649848494561721540673691435445070"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@014239b9971d79421a0ba652579e1ca1b7b57b6d",
        "target": {
            "file": "drivers/firmware/cirrus/cs_dsp.c",
            "function": "cs_dsp_coeff_parse_alg"
        },
        "id": "CVE-2024-41038-9bb7adbe"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "length": 1433.0,
            "function_hash": "122428651374265067191718714646454142791"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@014239b9971d79421a0ba652579e1ca1b7b57b6d",
        "target": {
            "file": "drivers/firmware/cirrus/cs_dsp.c",
            "function": "cs_dsp_parse_coeff"
        },
        "id": "CVE-2024-41038-abaf686f"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "302535473224740329979257828318202427884",
                "47161228136916583389651447001619225979",
                "281220477157199334001236338679625799929",
                "214476254531557119746762040526704188204",
                "257298282125229479911983219725559397093",
                "216619482238430744705604351290969687010",
                "210952407595067230272731611216657999530",
                "56663622667902661650297340258029737751",
                "87925144340690945514931972502458888020",
                "245962849974629207584766675566107337062",
                "6640938504356384535625393526210249",
                "230819785430963255975090186724379591128",
                "43217754750219358476249520256112513603",
                "184777014093369906117725163656899385253",
                "234286845245421602319544785548443184899",
                "238237215111980918867318971676102469862",
                "235411462526443547691419736793272222234",
                "29860096413300333977689021784619395808",
                "307165737978708578213841322971201169568",
                "199193563080088995927870409724328579679",
                "108049583344397531024893288941173186147",
                "199534963061490532371310380524143612638",
                "89582545178771476009898376846037548379",
                "1210002940173882864674209677623173940",
                "89512913474503318154634931876854221282",
                "185173035725853388156040619549187635213",
                "260866314401500272208534697778067482797",
                "203329086530426778346968357943866957871",
                "122428274997355347990296185227387764481",
                "290434285888836716439520089230934952534",
                "326220037032489635916602324084551840382",
                "95899842746094782830162675285879853516",
                "320877814490028842209203504526483697429",
                "180996430025501196841781386014556373815",
                "75617147953475543061365146900300358228",
                "205163752289590128221893117893078999054",
                "277704732293632829368791121975107463064",
                "315725405121651448377203270666397280530",
                "87161149820643948828822645480707861434",
                "153504764215547719790195105095233584759",
                "310701520044142227911709878246318247183",
                "273005915635055084897029909523212050361",
                "191756968641900778983885619328756734732",
                "231913418475417496405080543507722967923",
                "239788368423870632726202887954751823267",
                "167489649927371604090124716147177235903",
                "235769897525706279937219379146198959713",
                "14093064773035136046900398712105290473",
                "305827516323278040797297688836537264730",
                "218633851329334101144925947441626773776",
                "137451235563450928376793618028288871180",
                "112314866947726539845208220763508195554",
                "288780173515398839063257418388113715926",
                "11227971027702932148703560022391119687",
                "287250604247510279790309215411963952896",
                "173695966434545077787549318505661132040",
                "60403342162355175004679778365685302434",
                "96321279450449511315013087041068590460",
                "47539186479106999367788665360693922076",
                "291080703300930521724306813207119797193",
                "116799636889719334953211713780295442124",
                "261516561042428774317157455892227651054",
                "245902050430435944888563561646552948512",
                "30432538466354987516190240465221129680",
                "195639207982640997736721144652084484307",
                "96935734094970963166642452690003026618",
                "188786515580918497257357957129189858864",
                "247160993059460557640729451603601895205",
                "128796568311854991371436659873570585847",
                "121450372433711144900343225728509249497",
                "143110249801395683417873959967301882556",
                "9442636808240473422170350041545139512",
                "212577362392528115914147394735468192146",
                "46118249536172861307039464675573263024",
                "73558330998069049328696820965465224132",
                "106416264314375084054030583149407171194",
                "121492739381763455632462399529815291352",
                "122486983818072623548205402469381540798",
                "293399907366817195781056308602557947065",
                "56636550661558499893311970357340194953",
                "330984048068593860754886270018768176045"
            ],
            "threshold": 0.9
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@76ea8e13aaefdfda6e5601323d6ea5340359dcfa",
        "target": {
            "file": "drivers/firmware/cirrus/cs_dsp.c"
        },
        "id": "CVE-2024-41038-b2c84ffa"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "length": 1711.0,
            "function_hash": "30494002500202634419193403004792062582"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6619aa48a011364e9f29083cc76368e6acfe5b11",
        "target": {
            "file": "drivers/firmware/cirrus/cs_dsp.c",
            "function": "cs_dsp_coeff_parse_coeff"
        },
        "id": "CVE-2024-41038-d1cae589"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "length": 341.0,
            "function_hash": "34907605540214209512714271372415009848"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6619aa48a011364e9f29083cc76368e6acfe5b11",
        "target": {
            "file": "drivers/firmware/cirrus/cs_dsp.c",
            "function": "cs_dsp_coeff_parse_string"
        },
        "id": "CVE-2024-41038-e1993995"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "length": 1433.0,
            "function_hash": "122428651374265067191718714646454142791"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2163aff6bebbb752edf73f79700f5e2095f3559e",
        "target": {
            "file": "drivers/firmware/cirrus/cs_dsp.c",
            "function": "cs_dsp_parse_coeff"
        },
        "id": "CVE-2024-41038-e4dd254b"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "length": 1433.0,
            "function_hash": "122428651374265067191718714646454142791"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6619aa48a011364e9f29083cc76368e6acfe5b11",
        "target": {
            "file": "drivers/firmware/cirrus/cs_dsp.c",
            "function": "cs_dsp_parse_coeff"
        },
        "id": "CVE-2024-41038-f6c3b8fa"
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.100
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.41
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.9.10