CVE-2025-38330

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The Linux kernel contains a flaw in the cs dsp firmware related to out-of-bounds memory access during a KUnit test (ctl cache). The issue occurs in the cs dsp ctl cache init multiple offsets() function, where the length of a register value allocation is incorrectly overridden, leading to test failures. The fix removes the length override, maintaining the original value of 4 for all operations.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.