Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-27048
HistoryMay 01, 2024 - 12:00 a.m.

CVE-2024-27048

2024-05-0100:00:00
ubuntu.com
ubuntu.com
3
linux
kernel
wifi
vulnerability
brcm80211
pmk_op
allocation
kzalloc
null pointer
dereference
bug

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved: wifi:
brcm80211: handle pmk_op allocation failure The kzalloc() in
brcmf_pmksa_v3_op() will return null if the physical memory has run out. As
a result, if we dereference the null value, the null pointer dereference
bug will happen. Return -ENOMEM from brcmf_pmksa_v3_op() if kzalloc() fails
for pmk_op.

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%