CVE-2024-38575

in linux kernel wifi, the kzalloc() in brcmf_pcie_download_fw_nvram() will return null if the physical memory has run out. Thereafter if get_random_bytes() is used, a null pointer dereference is triggered, causing allocation failure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.