Description
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: pcie: handle randbuf allocation failure The kzalloc() in brcmf_pcie_download_fw_nvram() will return null if the physical memory has run out. As a result, if we use get_random_bytes() to generate random bytes in the randbuf, the null pointer dereference bug will happen. In order to prevent allocation failure, this patch adds a separate function using buffer on kernel stack to generate random bytes in the randbuf, which could prevent the kernel stack from overflow.
References (5)
Core 5
Core References
Scores
CVSS v3
5.5
EPSS
0.0022
EPSS Percentile
13.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-476
Status
published
Products (20)
linux/Kernel
< 6.1.93linux
linux/Kernel
6.2.0 - 6.6.33linux
linux/Kernel
6.4.0 - 6.8.12linux
linux/Kernel
6.7.0 - 6.9.3linux
Linux/Linux
< 6.4
Linux/Linux
6.1.30 - 6.1.93
Linux/Linux
6.1.93 - 6.1.*
Linux/Linux
6.10
Linux/Linux
6.3.4 - 6.4
Linux/Linux
6.4
... and 10 more
Published
Jun 19, 2024
Tracked Since
Feb 18, 2026