CVE-2025-38330: firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache)
In the Linux kernel, the following vulnerability has been resolved:
firmware: csdsp: Fix OOB memory read access in KUnit test (ctl cache)
KASAN reported out of bounds access - csdspctlcacheinitmultipleoffsets(). The code uses mockcoefftemplate.lengthbytes (4 bytes) for register value allocations. But later, this length is set to 8 bytes which causes test code failures.
As fix, just remove the lenght override, keeping the original value 4 for all operations.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-aws-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1015.15~24.04.1 - Upgrade
Upgrade
ubuntu/linux-azure-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1014.14~24.04.1 - Upgrade
Upgrade
ubuntu/linux-azure-nvidia-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1007.7 - Upgrade
Upgrade
ubuntu/linux-gcp-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1018.19~24.04.1 - Upgrade
Upgrade
ubuntu/linux-oem-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1014.14 - Upgrade
Upgrade
ubuntu/linux-oracle-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1015.15~24.04.1 - Upgrade
Upgrade
ubuntu/linux-riscv-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-34.34.1~24.04.1 - Upgrade
Upgrade
ubuntu/linux-realtime-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1014.14~24.04.1 - Configuration
Remove the length override and retain the original mock_coeff_template.length_bytes value of 4 bytes for all operations; do not set it to 8 bytes, which causes test code failures.
Linux kernel firmware: cs_dsp KUnit test (ctl cache) mock_coeff_template.length_bytes = 4 bytes
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38330?
The severity of CVE-2025-38330 is classified as moderate due to the potential for out-of-bounds memory access.
What systems are affected by CVE-2025-38330?
CVE-2025-38330 affects the Linux Kernel used in various Linux distributions.
How do I fix CVE-2025-38330?
To fix CVE-2025-38330, update the Linux Kernel to the latest patched version that addresses this vulnerability.
What type of vulnerability is CVE-2025-38330?
CVE-2025-38330 is an out-of-bounds memory read vulnerability in the Linux Kernel.
Is CVE-2025-38330 being actively exploited?
As of now, there are no confirmed reports of active exploitation of CVE-2025-38330 in the wild.