CVE-2024-42237

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to the validation of payload length in the cs dsp module of the Linux kernel. Specifically, the check for the length of a block payload was being done near the end of the loop iteration, but some code before that check used the length field without validating it. This could potentially allow an attacker to cause a denial of service. The functions cs dsp load() and cs dsp coeff load() are involved in this issue.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.