A medium severity vulnerability in the Linux kernel's firmware component cs_dsp was fixed by changing the handling of name fields in V1 wmfw files to use strnlen() instead of strlen(). This prevents potential buffer overruns when the NUL terminator is missing in fixed-size arrays.