An issue was discovered in the Linux kernel brcm_nvram_parse in drivers/nvmem/brcm_nvram.c. Lacks for the check of the return value of kzalloc() can cause the NULL Pointer Dereference.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python3-perfUpgrade kernel-develUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.12-17.42Upgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel | Feb 17, 2025 | Jan 27, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 28, 2023 |
| Ubuntu | — | Upgrade linux-lowlatency-hwe-5.19Upgrade linux-hwe-5.19Upgrade linux-raspiUpgrade linux-gcpUpgrade linux-starfiveUpgrade linux-oracleUpgrade linux-kvmUpgrade linux-lowlatencyUpgrade linux-riscvUpgrade linux-gcp-5.19Upgrade linux-allwinnerUpgrade linux-allwinner-5.19Upgrade linux-starfive-5.19Upgrade linux-riscv-5.19Upgrade linux-aws-5.19Upgrade linuxUpgrade linux-azureUpgrade linux-ibmUpgrade linux-oem-6.1Upgrade linux-aws | Nov 19, 2024 | Jun 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub