Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2024-27048
HistoryMay 01, 2024 - 1:15 p.m.

CVE-2024-27048

2024-05-0113:15:49
Debian Security Bug Tracker
security-tracker.debian.org
2
linux kernel
cve-2024-27048
wifi
brcm80211
pmk_op
allocation failure
null pointer
dereference bug
physical memory
kzalloc
enomem

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved: wifi: brcm80211: handle pmk_op allocation failure The kzalloc() in brcmf_pmksa_v3_op() will return null if the physical memory has run out. As a result, if we dereference the null value, the null pointer dereference bug will happen. Return -ENOMEM from brcmf_pmksa_v3_op() if kzalloc() fails for pmk_op.

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%