An issue was discovered in the Linux kernel brcm_nvram_parse in drivers/nvmem/brcm_nvram.c. Lacks for the check of the return value of kzalloc() can cause the NULL Pointer Dereference.

🗓️ 05 Jul 2023 07:00:00Reported by MicrosoftType

Linux kernel brcm_nvram_parse in drivers/nvmem/brcm_nvram.c risks NULL pointer dereference from unchecked kzalloc.

Reporter	Title	Published	Views	Family All 27
Tenable Nessus	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2023-132)	21 Mar 202300:00	–	nessus
Tenable Nessus	Photon OS 4.0: Linux PHSA-2021-4.0-0065	22 Jul 202100:00	–	nessus
Tenable Nessus	Photon OS 5.0: Linux PHSA-2023-5.0-0009	23 Jul 202400:00	–	nessus
Tenable Nessus	Photon OS 5.0: Linux PHSA-2023-5.0-91-0009	10 Aug 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2023-3359	9 Aug 202500:00	–	nessus
Amazon	Important: kernel	22 Mar 202300:00	–	amazon
BDU FSTEC	The vulnerability of the brcm_nvram_parse() function in the Linux operating system’s kernel allows a hacker to cause a service failure.	11 Jul 202300:00	–	bdu_fstec
CBLMariner	CVE-2023-3359 affecting package hyperv-daemons for versions less than 5.15.118.1-1	3 Aug 202302:51	–	cbl_mariner
CBLMariner	CVE-2023-3359 affecting package kernel for versions less than 5.15.118.1-2	10 Aug 202316:37	–	cbl_mariner
CBLMariner	CVE-2023-3359 affecting package kernel 5.10.183.1-1	28 Jul 202323:16	–	cbl_mariner