CVE-2024-27413

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-27413
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-27413.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-27413
Downstream
Related
Published
2024-05-17T11:50:53.780Z
Modified
2026-03-14T12:27:46.827935Z
Summary
efi/capsule-loader: fix incorrect allocation size
Details

In the Linux kernel, the following vulnerability has been resolved:

efi/capsule-loader: fix incorrect allocation size

gcc-14 notices that the allocation with sizeof(void) on 32-bit architectures is not enough for a 64-bit physaddrt:

drivers/firmware/efi/capsule-loader.c: In function 'eficapsuleopen': drivers/firmware/efi/capsule-loader.c:295:24: error: allocation of insufficient size '4' for type 'physaddrt' {aka 'long long unsigned int'} with size '8' [-Werror=alloc-size] 295 | capinfo->phys = kzalloc(sizeof(void *), GFPKERNEL); | ^

Use the correct type instead here.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/27xxx/CVE-2024-27413.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
f24c4d478013d82bd1b943df566fff3561d52864
Fixed
00cf21ac526011a29fc708f8912da446fac19f7b
Fixed
950d4d74d311a18baed6878dbfba8180d7e5dddd
Fixed
537e3f49dbe88881a6f0752beaa596942d9efd64
Fixed
4b73473c050a612fb4317831371073eda07c3050
Fixed
ddc547dd05a46720866c32022300f7376c40119f
Fixed
11aabd7487857b8e7d768fefb092f66dfde68492
Fixed
62a5dcd9bd3097e9813de62fa6f22815e84a0172
Fixed
fccfa646ef3628097d59f7d9c1a3e84d4b6bb45e
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
95a362c9a6892085f714eb6e31eea6a0e3aa93bf

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-27413.json"