Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2024-38575
HistoryJun 19, 2024 - 2:15 p.m.

CVE-2024-38575

2024-06-1914:15:17
Debian Security Bug Tracker
security-tracker.debian.org
cve-2024-38575
brcmfmac
pcie
randbuf allocation failure
unix

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: pcie: handle randbuf allocation failure The kzalloc() in brcmf_pcie_download_fw_nvram() will return null if the physical memory has run out. As a result, if we use get_random_bytes() to generate random bytes in the randbuf, the null pointer dereference bug will happen. In order to prevent allocation failure, this patch adds a separate function using buffer on kernel stack to generate random bytes in the randbuf, which could prevent the kernel stack from overflow.

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

Related for DEBIANCVE:CVE-2024-38575