Out-of-Bounds Memory Access in Linux Kernel by Vendor

CVE-2025-38340

What is CVE-2025-38340?

A vulnerability in the Linux kernel firmware related to the 'cs_dsp' component has been identified, which allows for out-of-bounds memory read access during KUnit tests. This issue arises when the length of the source string used in the function 'cs_dsp_mock_bin_add_name_or_info()' is improperly rounded, leading to potential security risks. The Kernel Address Sanitizer (KASAN) has flagged this problem, highlighting the importance of addressing such memory management concerns to ensure system stability and integrity.

References