CVE-2024-38575
- Source
- https://cve.org/CVERecord?id=CVE-2024-38575
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-38575.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-38575
- Downstream
BELL (1)
DEBIAN (1)
MGASA (2)
OESA (1)
RXSA (1)
SUSE (5)
- Related
- Published
- 2024-06-19T13:37:34Z
- Modified
- 2026-10-08T02:48:31Z
- Summary
- wifi: brcmfmac: pcie: handle randbuf allocation failure
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
wifi: brcmfmac: pcie: handle randbuf allocation failure
The kzalloc() in brcmf_pcie_download_fw_nvram() will return null if the physical memory has run out. As a result, if we use get_random_bytes() to generate random bytes in the randbuf, the null pointer dereference bug will happen.
In order to prevent allocation failure, this patch adds a separate function using buffer on kernel stack to generate random bytes in the randbuf, which could prevent the kernel stack from overflow.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/38xxx/CVE-2024-38575.json" }- References
-
- https://git.kernel.org/stable/c/0eb2c0528e232b3c32cde9d5e1c9f80ba2996e49
- https://git.kernel.org/stable/c/316f790ebcf94bdf59f794b7cdea4068dc676d4c
- https://git.kernel.org/stable/c/3729ca9e48d19a03ae049e2bde510e161c2f3720
- https://git.kernel.org/stable/c/7c15eb344b0d4d3468c9b2a7591ad2b859b29b88
- https://git.kernel.org/stable/c/c37466406f075476c2702ecc01917928af871f3b
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/38xxx/CVE-2024-38575.json
- https://nvd.nist.gov/vuln/detail/CVE-2024-38575
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedc35105f375b530bc27e03ea9250b1c26dd4cae86Fixed0eb2c0528e232b3c32cde9d5e1c9f80ba2996e49
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced91918ce88d9fef408bb12c46a27c73d79b604c20Fixedc37466406f075476c2702ecc01917928af871f3bFixed7c15eb344b0d4d3468c9b2a7591ad2b859b29b88Fixed3729ca9e48d19a03ae049e2bde510e161c2f3720Fixed316f790ebcf94bdf59f794b7cdea4068dc676d4c
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced6.1.30Fixed6.1.93
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced6.3.4Fixed6.4
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedba72baed066f3bfa8b489e4b58f1fcaf51c04f83
Affected versions
v6.*
v6.1.30
v6.1.31
v6.1.32
v6.1.33
v6.1.34
v6.1.35
v6.1.36
v6.1.37
v6.1.38
v6.1.39
v6.1.40
v6.1.41
v6.1.42
v6.1.43
v6.1.44
v6.1.45
v6.1.46
v6.1.47
v6.1.48
v6.1.49
v6.1.50
v6.1.51
v6.1.52
v6.1.53
v6.1.54
v6.1.55
v6.1.56
v6.1.57
v6.1.58
v6.1.59
v6.1.60
v6.1.61
v6.1.62
v6.1.63
v6.1.64
v6.1.65
v6.1.66
v6.1.67
v6.1.68
v6.1.69
v6.1.70
v6.1.71
v6.1.72
v6.1.73
v6.1.74
v6.1.75
v6.1.76
v6.1.77
v6.1.78
v6.1.79
v6.1.80
v6.1.81
v6.1.82
v6.1.83
v6.1.84
v6.1.85
v6.1.86
v6.1.87
v6.1.88
v6.1.89
v6.1.90
v6.1.91
v6.1.92
v6.3.10
v6.3.11
v6.3.12
v6.3.13
v6.3.4
v6.3.5
v6.3.6
v6.3.7
v6.3.8
v6.3.9
Linux / Kernel
Package
- Name
- Kernel