Riskcovery

CVE-2024-38575

wifi: brcmfmac: pcie: handle randbuf allocation failure

State
Published
Severity
Not scored
Published
Jun 19, 2024
Updated
May 23, 2026
Reserved
Jun 18, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: brcmfmac: pcie: handle randbuf allocation failure

The kzalloc() in brcmf_pcie_download_fw_nvram() will return null if the physical memory has run out. As a result, if we use get_random_bytes() to generate random bytes in the randbuf, the null pointer dereference bug will happen.

In order to prevent allocation failure, this patch adds a separate function using buffer on kernel stack to generate random bytes in the randbuf, which could prevent the kernel stack from overflow.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • c35105f375b530bc27e03ea9250b1c26dd4cae86 to before 0eb2c0528e232b3c32cde9d5e1c9f80ba2996e49Affected
  • 91918ce88d9fef408bb12c46a27c73d79b604c20 to before c37466406f075476c2702ecc01917928af871f3bAffected
  • 91918ce88d9fef408bb12c46a27c73d79b604c20 to before 7c15eb344b0d4d3468c9b2a7591ad2b859b29b88Affected
  • 91918ce88d9fef408bb12c46a27c73d79b604c20 to before 3729ca9e48d19a03ae049e2bde510e161c2f3720Affected
  • 91918ce88d9fef408bb12c46a27c73d79b604c20 to before 316f790ebcf94bdf59f794b7cdea4068dc676d4cAffected
  • ba72baed066f3bfa8b489e4b58f1fcaf51c04f83Affected
  • 6.1.30 to before 6.1.93Affected
  • 6.3.4 to before 6.4Affected
LinuxLinux
  • 6.4Affected
  • before 6.4Not affected
  • 6.1.93 through 6.1.*Not affected
  • 6.6.33 through 6.6.*Not affected
  • 6.8.12 through 6.8.*Not affected
  • 6.9.3 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.