Riskcovery

CVE-2024-27048

wifi: brcm80211: handle pmk_op allocation failure

State
Published
Severity
Not scored
Published
May 1, 2024
Updated
May 11, 2026
Reserved
Feb 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: brcm80211: handle pmk_op allocation failure

The kzalloc() in brcmf_pmksa_v3_op() will return null if the physical memory has run out. As a result, if we dereference the null value, the null pointer dereference bug will happen.

Return -ENOMEM from brcmf_pmksa_v3_op() if kzalloc() fails for pmk_op.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a96202acaea47fa8377088e0952bb63bd02a3bab to before df62e22c2e27420e8990a4f09e30d7bf56c2036fAffected
  • a96202acaea47fa8377088e0952bb63bd02a3bab to before 9975908315c13bae2f2ed5ba92870fa935180b0eAffected
  • a96202acaea47fa8377088e0952bb63bd02a3bab to before 6138a82f3bccfc67ed7ac059493579fc326c02e5Affected
  • a96202acaea47fa8377088e0952bb63bd02a3bab to before b4152222e04cb8afeeca239c90e3fcaf4c553b42Affected
LinuxLinux
  • 6.4Affected
  • before 6.4Not affected
  • 6.6.23 through 6.6.*Not affected
  • 6.7.11 through 6.7.*Not affected
  • 6.8.2 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.