An issue was discovered in the Linux kernel brcm_nvram_parse in drivers/nvmem/brcm_nvram.c. Lacks for the check of the return value of kzalloc() can cause the NULL Pointer Dereference.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.12-17.42Upgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade kernel-develUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64 | Feb 17, 2025 | Jan 27, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 28, 2023 |
| Ubuntu | — | Upgrade linux-riscv-5.19Upgrade linuxUpgrade linux-allwinner-5.19Upgrade linux-awsUpgrade linux-oem-6.1Upgrade linux-starfive-5.19Upgrade linux-azureUpgrade linux-aws-5.19Upgrade linux-gcp-5.19Upgrade linux-ibmUpgrade linux-allwinnerUpgrade linux-starfiveUpgrade linux-oracleUpgrade linux-lowlatency-hwe-5.19Upgrade linux-kvmUpgrade linux-hwe-5.19Upgrade linux-raspiUpgrade linux-gcpUpgrade linux-lowlatencyUpgrade linux-riscv | Nov 19, 2024 | Jun 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub