Lucene search

K
nvd416baaa9-dc9f-4396-8d5f-8c081fb06d67NVD:CVE-2024-38575
HistoryJun 19, 2024 - 2:15 p.m.

CVE-2024-38575

2024-06-1914:15:17
416baaa9-dc9f-4396-8d5f-8c081fb06d67
web.nvd.nist.gov
linux kernel
wifi
vulnerability
cve-2024-38575
brcmfmac
pcie
randbuf
allocation failure
kzalloc()
brcmf_pcie_download_fw_nvram()
get_random_bytes()
null pointer dereference
kernel stack
overflow

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved:

wifi: brcmfmac: pcie: handle randbuf allocation failure

The kzalloc() in brcmf_pcie_download_fw_nvram() will return null
if the physical memory has run out. As a result, if we use
get_random_bytes() to generate random bytes in the randbuf, the
null pointer dereference bug will happen.

In order to prevent allocation failure, this patch adds a separate
function using buffer on kernel stack to generate random bytes in
the randbuf, which could prevent the kernel stack from overflow.

0.0004 Low

EPSS

Percentile

15.7%

Related for NVD:CVE-2024-38575