Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-27048
HistoryMay 01, 2024 - 12:54 p.m.

CVE-2024-27048 wifi: brcm80211: handle pmk_op allocation failure

2024-05-0112:54:28
Linux
github.com
1
linux kernel
wifi
brcm80211
pmk_op allocation
null pointer dereference
physical memory

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

wifi: brcm80211: handle pmk_op allocation failure

The kzalloc() in brcmf_pmksa_v3_op() will return null if the
physical memory has run out. As a result, if we dereference
the null value, the null pointer dereference bug will happen.

Return -ENOMEM from brcmf_pmksa_v3_op() if kzalloc() fails
for pmk_op.

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial