PT-2024-7849 · Linux+8 · Linux Kernel+8

Published

2024-03-05

·

Updated

2025-09-29

·

CVE-2024-27048

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to a null pointer dereference bug in the brcm80211 component of the Linux kernel. This bug occurs when the kzalloc() function in brcmf pmksa v3 op() returns null due to physical memory running out, and the null value is subsequently dereferenced. The bug can be exploited to cause a denial of service.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2024:3618
ALSA-2024:3627
ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
BDU:2024-09350
CESA-2024_3618
CESA-2024_3627
CVE-2024-27048
INFSA-2024_3618
INFSA-2024_3627
INFSA-2024_9315
RHSA-2024:3618
RHSA-2024:3627
RHSA-2024:9315
RHSA-2024_3618
RHSA-2024_3627
RHSA-2024_9315
RHSA-2025:3935
RLSA-2024:3618
RLSA-2024:3627
SUSE-SU-2025:20008-1
SUSE-SU-2025:20028-1
USN-6816-1
USN-6817-1
USN-6817-2
USN-6817-3
USN-6878-1

Affected Products

Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Ubuntu