CVE-2024-27048

A vulnerability was found in the Linux kernel's Wi-Fi cfg80211.c driver, where a lack of proper checks can result in a NULL pointer dereference. This issue occurs when the brcmf_pmksa_v3_op() function attempts to call malloc (), but the physical memory has run out. In this situation, kzalloc() will return NULL, which the function does not check before using it in the corresponding value pmk_op., possibly leading to system instability.

This vulnerability is rated as having Moderate severity rather than Important because exploitation requires physical Broadcom Wi-Fi hardware, local access, and severe system memory exhaustion. Typical Red Hat Enterprise Linux environments operate on server or virtualized infrastructure where wireless interfaces are absent or unconfigured, greatly limiting real-world exposure. Under conditions of extreme memory pressure, triggering this flaw results in a kernel crash causing a denial of service, with no direct threat to confidentiality or system integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.