CVE-2025-38330
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-38330
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-38330.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-38330
- Downstream
- Published
- 2025-07-10T08:15:03.579Z
- Modified
- 2025-11-20T09:16:03.027954Z
- Summary
- firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache)
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache)
KASAN reported out of bounds access - csdspctlcacheinitmultipleoffsets(). The code uses mockcoefftemplate.length_bytes (4 bytes) for register value allocations. But later, this length is set to 8 bytes which causes test code failures.
As fix, just remove the lenght override, keeping the original value 4 for all operations.
- References
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced9b33a4fc500cedc1adc9c0ee01e30ffd50e5887aFixede3dafc64b90546eb769f33333afabd9e3e915757
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced9b33a4fc500cedc1adc9c0ee01e30ffd50e5887aFixedf4ba2ea57da51d616b689c4b8826c517ff5a8523
Affected versions
v6.*
v6.13
v6.13-rc3
v6.13-rc4
v6.13-rc5
v6.13-rc6
v6.13-rc7
v6.14
v6.14-rc1
v6.14-rc2
v6.14-rc3
v6.14-rc4
v6.14-rc5
v6.14-rc6
v6.14-rc7
v6.15
v6.15-rc1
v6.15-rc2
v6.15-rc3
v6.15-rc4
v6.15-rc5
v6.15-rc6
v6.15-rc7
v6.15.1
v6.15.2
v6.15.3
Database specific
vanir_signatures
[
{
"target": {
"file": "drivers/firmware/cirrus/test/cs_dsp_test_control_cache.c"
},
"digest": {
"line_hashes": [
"309727496629076686477488924648778012133",
"24788740364990507723274792077070332645",
"176114479733086898578558965840246998053",
"272569836473176912519109214347483244826"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f4ba2ea57da51d616b689c4b8826c517ff5a8523",
"deprecated": false,
"id": "CVE-2025-38330-bf91b7e7",
"signature_type": "Line"
},
{
"target": {
"function": "cs_dsp_ctl_cache_init_multiple_offsets",
"file": "drivers/firmware/cirrus/test/cs_dsp_test_control_cache.c"
},
"digest": {
"length": 2614.0,
"function_hash": "176263123859510944480159773068788149632"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f4ba2ea57da51d616b689c4b8826c517ff5a8523",
"deprecated": false,
"id": "CVE-2025-38330-ee1cc2f5",
"signature_type": "Function"
}
]