CVE-2025-38340

A flaw was found in the Linux kernel. A local user could exploit an out-of-bounds memory read vulnerability in the cs_dsp firmware component. This occurs because the cs_dsp_mock_bin_add_name_or_info() function incorrectly calculates the length of a source string, leading to access beyond allocated memory. This memory corruption could result in information disclosure or a denial of service (DoS) on the system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.