In the Linux kernel, the following vulnerability has been resolved:
wifi: brcmfmac: pcie: handle randbuf allocation failure
The kzalloc() in brcmf_pcie_download_fw_nvram() will return null if the physical memory has run out. As a result, if we use get_random_bytes() to generate random bytes in the randbuf, the null pointer dereference bug will happen.
In order to prevent allocation failure, this patch adds a separate function using buffer on kernel stack to generate random bytes in the randbuf, which could prevent the kernel stack from overflow.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debugUpgrade kernel-rtUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modulesUpgrade kernel-64kUpgrade kernel-64k-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-cross-headersUpgrade libperfUpgrade perfUpgrade python3-perfUpgrade kernel-64k-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade rvUpgrade kernel-64k-debug-coreUpgrade kernel-toolsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-debug-uki-virtUpgrade kernel-rt-kvmUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-debug-modules-coreUpgrade bpftoolUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-develUpgrade kernel-modulesUpgrade kernel-headersUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-develUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdumpUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-uki-virtUpgrade kernel-develUpgrade kernel-docUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modulesUpgrade kernel-debugUpgrade kernel-modules-coreUpgrade kernel-debug-develUpgrade rtlaUpgrade kernel-64k-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-devel | Aug 12, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 12, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-rt-debug-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade python3-perfUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-debuginfoUpgrade libperfUpgrade kernel-tools-debuginfoUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade rtlaUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-modules-coreUpgrade kernel-rt-debug-kvmUpgrade libperf-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debugUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rtUpgrade kernel-rt-develUpgrade rvUpgrade kernel-tools-libs-develUpgrade kernel-rt-kvmUpgrade kernel-debug-debuginfoUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-coreUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-rt-modules | Aug 22, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade dtb-exynosUpgrade kernel-azure-optionalUpgrade kernel-debug-livepatch-develUpgrade kernel-macrosUpgrade kernel-64kb-livepatch-develUpgrade kernel-obs-qaUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-64kbUpgrade dtb-lgUpgrade kernel-rtUpgrade kernel-azure-vdsoUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-azureUpgrade dtb-qcomUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-rtUpgrade dtb-alteraUpgrade dtb-broadcomUpgrade cluster-md-kmp-defaultUpgrade kernel-64kbUpgrade kernel-azure-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-devel-azureUpgrade dtb-apmUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade gfs2-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-sourceUpgrade kernel-default-base-rebuildUpgrade kernel-rt-develUpgrade kernel-syms-rtUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade dtb-amlogicUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatchUpgrade kernel-devel-rtUpgrade kernel-default-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade dtb-xilinxUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docsUpgrade kernel-debug-vdsoUpgrade dtb-mediatekUpgrade dtb-marvellUpgrade cluster-md-kmp-rtUpgrade dtb-appleUpgrade dtb-amdUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debugUpgrade dtb-sprdUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade gfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-extraUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-azureUpgrade dtb-armUpgrade dtb-socionextUpgrade kernel-rt_debug-develUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade dtb-nvidiaUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade kernel-azureUpgrade kernel-source-rtUpgrade kernel-debug-develUpgrade dtb-caviumUpgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-debugUpgrade dlm-kmp-azureUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-default-optionalUpgrade kernel-source-vanillaUpgrade kernel-64kb-extraUpgrade gfs2-kmp-default | Jul 23, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-genericUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-raspiUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-kvmUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-azure | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub