In the Linux kernel, the following vulnerability has been resolved:
wifi: brcmfmac: pcie: handle randbuf allocation failure
The kzalloc() in brcmf_pcie_download_fw_nvram() will return null if the physical memory has run out. As a result, if we use get_random_bytes() to generate random bytes in the randbuf, the null pointer dereference bug will happen.
In order to prevent allocation failure, this patch adds a separate function using buffer on kernel stack to generate random bytes in the randbuf, which could prevent the kernel stack from overflow.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-64k-modules-coreUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-develUpgrade rtlaUpgrade kernel-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-develUpgrade bpftoolUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-modulesUpgrade kernel-docUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-64k-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-debug-coreUpgrade kernel-64k-modulesUpgrade kernel-64kUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rtUpgrade python3-perfUpgrade kernel-zfcpdump-modules-coreUpgrade rvUpgrade perfUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debugUpgrade kernelUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-64k-devel-matchedUpgrade libperf | Aug 12, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 12, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade libperf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modulesUpgrade kernel-develUpgrade kernel-zfcpdump-devel-matchedUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade perf-debuginfoUpgrade kernel-rt-debugUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade rvUpgrade kernel-zfcpdump-coreUpgrade perfUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modules-coreUpgrade python3-perfUpgrade rtlaUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-coreUpgrade kernel-cross-headersUpgrade libperfUpgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-devel-matchedUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-devel-matchedUpgrade kernel-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-core | Aug 22, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-default-vdsoUpgrade kernel-rtUpgrade kernel-syms-rtUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade dtb-qcomUpgrade kernel-kvmsmall-develUpgrade kernel-devel-rtUpgrade kernel-kvmsmallUpgrade dtb-exynosUpgrade kernel-rt-livepatch-develUpgrade dtb-amlogicUpgrade kernel-default-develUpgrade kernel-source-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-azure-extraUpgrade kernel-obs-qaUpgrade kernel-syms-azureUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-64kbUpgrade dtb-lgUpgrade kernel-macrosUpgrade kernel-azure-optionalUpgrade dtb-freescaleUpgrade gfs2-kmp-64kbUpgrade dtb-apmUpgrade kernel-default-base-rebuildUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-develUpgrade dtb-amazonUpgrade gfs2-kmp-rtUpgrade dtb-alteraUpgrade dtb-broadcomUpgrade cluster-md-kmp-defaultUpgrade kernel-64kbUpgrade kernel-azure-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-symsUpgrade kernel-devel-azureUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade dtb-armUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-develUpgrade cluster-md-kmp-64kbUpgrade kernel-docsUpgrade kernel-default-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-source-rtUpgrade kernel-debug-develUpgrade kernel-rt-optionalUpgrade dtb-marvellUpgrade dlm-kmp-azureUpgrade kernel-rt-extraUpgrade kselftests-kmp-azureUpgrade dtb-appleUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade dtb-mediatekUpgrade dtb-hisiliconUpgrade kernel-default-baseUpgrade dtb-rockchipUpgrade reiserfs-kmp-rtUpgrade dtb-socionextUpgrade kernel-64kb-extraUpgrade kernel-debugUpgrade kernel-rt_debug-develUpgrade dtb-caviumUpgrade kernel-rt_debugUpgrade kernel-azureUpgrade dlm-kmp-rtUpgrade dtb-renesasUpgrade dtb-nvidiaUpgrade ocfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade dtb-xilinxUpgrade dtb-amdUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade kernel-devel | Jul 23, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-nvidiaUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-kvmUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-genericUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-generic-lpae | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub