CVE-2025-38330: firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache)
In the Linux kernel, the following vulnerability has been resolved:
firmware: csdsp: Fix OOB memory read access in KUnit test (ctl cache)
KASAN reported out of bounds access - csdspctlcacheinitmultipleoffsets(). The code uses mockcoefftemplate.lengthbytes (4 bytes) for register value allocations. But later, this length is set to 8 bytes which causes test code failures.
As fix, just remove the lenght override, keeping the original value 4 for all operations.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38330?
The severity of CVE-2025-38330 is classified as moderate due to the potential for out-of-bounds memory access.
What systems are affected by CVE-2025-38330?
CVE-2025-38330 affects the Linux Kernel used in various Linux distributions.
How do I fix CVE-2025-38330?
To fix CVE-2025-38330, update the Linux Kernel to the latest patched version that addresses this vulnerability.
What type of vulnerability is CVE-2025-38330?
CVE-2025-38330 is an out-of-bounds memory read vulnerability in the Linux Kernel.
Is CVE-2025-38330 being actively exploited?
As of now, there are no confirmed reports of active exploitation of CVE-2025-38330 in the wild.