CVE-2024-38575

MEDIUM

Linux Kernel - Null Pointer Dereference

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: pcie: handle randbuf allocation failure The kzalloc() in brcmf_pcie_download_fw_nvram() will return null if the physical memory has run out. As a result, if we use get_random_bytes() to generate random bytes in the randbuf, the null pointer dereference bug will happen. In order to prevent allocation failure, this patch adds a separate function using buffer on kernel stack to generate random bytes in the randbuf, which could prevent the kernel stack from overflow.

Scores

CVSS v3 5.5
EPSS 0.0022
EPSS Percentile 13.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-476
Status published
Products (20)
linux/Kernel < 6.1.93linux
linux/Kernel 6.2.0 - 6.6.33linux
linux/Kernel 6.4.0 - 6.8.12linux
linux/Kernel 6.7.0 - 6.9.3linux
Linux/Linux < 6.4
Linux/Linux 6.1.30 - 6.1.93
Linux/Linux 6.1.93 - 6.1.*
Linux/Linux 6.10
Linux/Linux 6.3.4 - 6.4
Linux/Linux 6.4
... and 10 more
Published Jun 19, 2024
Tracked Since Feb 18, 2026