CVE-2024-27048

Summary

In the Linux kernel, the following vulnerability has been resolved:

wifi: brcm80211: handle pmk_op allocation failure

The kzalloc() in brcmf_pmksa_v3_op() will return null if the physical memory has run out. As a result, if we dereference the null value, the null pointer dereference bug will happen.

Return -ENOMEM from brcmf_pmksa_v3_op() if kzalloc() fails for pmk_op.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxa96202acaea47fa8377088e0952bb63bd02a3bab < df62e22c2e27420e8990a4f09e30d7bf56c2036faffected
LinuxLinuxa96202acaea47fa8377088e0952bb63bd02a3bab < 9975908315c13bae2f2ed5ba92870fa935180b0eaffected
LinuxLinuxa96202acaea47fa8377088e0952bb63bd02a3bab < 6138a82f3bccfc67ed7ac059493579fc326c02e5affected
LinuxLinuxa96202acaea47fa8377088e0952bb63bd02a3bab < b4152222e04cb8afeeca239c90e3fcaf4c553b42affected
LinuxLinux6.4affected
LinuxLinux0 < 6.4unaffected
LinuxLinux6.6.23 <= 6.6.*unaffected
LinuxLinux6.7.11 <= 6.7.*unaffected
LinuxLinux6.8.2 <= 6.8.*unaffected
LinuxLinux6.9 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References