CVE-2024-27048: wifi: brcm80211: handle pmk_op allocation failure
In the Linux kernel, the following vulnerability has been resolved:
wifi: brcm80211: handle pmkop allocation failure
The kzalloc() in brcmfpmksav3op() will return null if the physical memory has run out. As a result, if we dereference the null value, the null pointer dereference bug will happen.
Return -ENOMEM from brcmfpmksav3op() if kzalloc() fails for pmkop.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
wifi: brcm80211: handle pmkop allocation failure
The Linux kernel CVE team has assigned CVE-2024-27048 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024050114-CVE-2024-27048-016f@gregkh/T
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27048?
CVE-2024-27048 is classified as a high severity vulnerability due to the potential for null pointer dereference leading to denial of service.
How do I fix CVE-2024-27048?
To fix CVE-2024-27048, update the Linux kernel to version 6.6.23, 6.7.11, 6.8.2, or 6.9 for Red Hat systems or the appropriate patched version for Debian based systems.
Which kernel versions are affected by CVE-2024-27048?
CVE-2024-27048 affects Linux kernel versions prior to 6.6.23, 6.7.11, 6.8.2, and 6.9.
What type of issue is CVE-2024-27048?
CVE-2024-27048 is a memory allocation issue in the Linux kernel's brcm80211 wifi driver.
Can CVE-2024-27048 lead to remote exploits?
CVE-2024-27048 does not lead to remote code execution but can cause denial of service due to system crashes.