CVE-2024-38575

wifi: brcmfmac: pcie: handle randbuf allocation failure

published June 19, 2024

CVSS
—
EPSS
0%
Percentile
12.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: brcmfmac: pcie: handle randbuf allocation failure

The kzalloc() in brcmf_pcie_download_fw_nvram() will return null

if the physical memory has run out. As a result, if we use

get_random_bytes() to generate random bytes in the randbuf, the

null pointer dereference bug will happen.

In order to prevent allocation failure, this patch adds a separate

function using buffer on kernel stack to generate random bytes in

the randbuf, which could prevent the kernel stack from overflow.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00225 · 12.5th percentile
Published
2024-06-19T13:37Z
EPSS history
Timeline
  • 19 JUN 13:37Z
    wifi: brcmfmac: pcie: handle randbuf allocation failure
    cvelistv5