Threats tagged 'ghsa-7jpq-74mw-mrg3'

A high-severity vulnerability (CVE-2025-38340) in the Linux kernel's firmware component cs_dsp was fixed. The issue involved an out-of-bounds (OOB) memory read in a KUnit test due to improper handling of string length rounding in cs_dsp_mock_bin_add_name_or_info(). This flaw was detected by KASAN and could lead to memory corruption impacting confidentiality and availability.