Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-27413

efi/capsule-loader: fix incorrect allocation size

Description

In the Linux kernel, the following vulnerability has been resolved: efi/capsule-loader: fix incorrect allocation size gcc-14 notices that the allocation with sizeof(void) on 32-bit architectures is not enough for a 64-bit phys_addr_t: drivers/firmware/efi/capsule-loader.c: In function 'efi_capsule_open': drivers/firmware/efi/capsule-loader.c:295:24: error: allocation of insufficient size '4' for type 'phys_addr_t' {aka 'long long unsigned int'} with size '8' [-Werror=alloc-size] 295 | cap_info->phys = kzalloc(sizeof(void *), GFP_KERNEL); | ^ Use the correct type instead here.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • f24c4d478013d82bd1b943df566fff3561d52864 to < 00cf21ac526011a29fc708f8912da446fac19f7baffected
  • f24c4d478013d82bd1b943df566fff3561d52864 to < 950d4d74d311a18baed6878dbfba8180d7e5ddddaffected
  • f24c4d478013d82bd1b943df566fff3561d52864 to < 537e3f49dbe88881a6f0752beaa596942d9efd64affected
  • f24c4d478013d82bd1b943df566fff3561d52864 to < 4b73473c050a612fb4317831371073eda07c3050affected
  • f24c4d478013d82bd1b943df566fff3561d52864 to < ddc547dd05a46720866c32022300f7376c40119faffected
  • f24c4d478013d82bd1b943df566fff3561d52864 to < 11aabd7487857b8e7d768fefb092f66dfde68492affected
  • f24c4d478013d82bd1b943df566fff3561d52864 to < 62a5dcd9bd3097e9813de62fa6f22815e84a0172affected
  • f24c4d478013d82bd1b943df566fff3561d52864 to < fccfa646ef3628097d59f7d9c1a3e84d4b6bb45eaffected
  • 95a362c9a6892085f714eb6e31eea6a0e3aa93bfaffected
  • 4.14.13 to < 4.15affected

Linux Linux

Default version status: affected

  • 4.15affected
  • 0 to < 4.15unaffected
  • 4.19.309 to ≤ 4.19.*unaffected
  • 5.4.271 to ≤ 5.4.*unaffected
  • 5.10.212 to ≤ 5.10.*unaffected
  • 5.15.151 to ≤ 5.15.*unaffected
  • 6.1.81 to ≤ 6.1.*unaffected
  • 6.6.21 to ≤ 6.6.*unaffected
  • 6.7.9 to ≤ 6.7.*unaffected
  • 6.8 to ≤ *unaffected

References