Описание
In the Linux kernel, the following vulnerability has been resolved:
wifi: brcmsmac: Fix dma_free_coherent() size
dma_alloc_consistent() may change the size to align it. The new size is
saved in alloced.
Change the free size to match the allocation size.
A flaw was found in the Linux kernel's brcmsmac Wi-Fi driver. This vulnerability arises from an incorrect size used during memory deallocation (dma_free_coherent) that does not match the size allocated (dma_alloc_consistent), which may be adjusted for alignment. An attacker could potentially exploit this memory mismatch, leading to memory corruption. This could result in a denial of service or other unpredictable system behavior.
Отчет
A Moderate impact flaw was found in the Linux kernel's brcmsmac Wi-Fi driver. This memory corruption vulnerability occurs due to an incorrect size being used during memory deallocation, which does not match the original allocation size. Exploitation could lead to a denial of service or other system instability on systems utilizing affected Broadcom wireless hardware.
Меры по смягчению последствий
To mitigate this issue, prevent the brcmsmac kernel module from loading if it is not required for your system's operation. This can be achieved by blacklisting the module.
To blacklist the brcmsmac module:
- Create a new file
/etc/modprobe.d/blacklist-brcmsmac.confwith the following content:
- Regenerate the initramfs to ensure the blacklist is applied during boot: For RHEL 7:
For RHEL 8 and 9:
- Reboot the system for the changes to take effect.
This mitigation may impact systems relying on Broadcom wireless hardware that uses the
brcmsmacdriver, as wireless functionality will be disabled. A system reboot is required for the changes to be applied.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | kernel | Fix deferred | ||
| Red Hat Enterprise Linux 6 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel | Fix deferred | ||
| Red Hat Enterprise Linux 7 | kernel-rt | Fix deferred | ||
| Red Hat Enterprise Linux 8 | kernel | Fix deferred | ||
| Red Hat Enterprise Linux 8 | kernel-rt | Fix deferred | ||
| Red Hat Enterprise Linux 9 | kernel | Fix deferred | ||
| Red Hat Enterprise Linux 9 | kernel-rt | Fix deferred |
Показывать по
Дополнительная информация
Статус:
5.5 Medium
CVSS3
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmsmac: Fix dma_free_coherent() size dma_alloc_consistent() may change the size to align it. The new size is saved in alloced. Change the free size to match the allocation size.
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmsmac: Fix dma_free_coherent() size dma_alloc_consistent() may change the size to align it. The new size is saved in alloced. Change the free size to match the allocation size.
In the Linux kernel, the following vulnerability has been resolved: w ...
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmsmac: Fix dma_free_coherent() size dma_alloc_consistent() may change the size to align it. The new size is saved in alloced. Change the free size to match the allocation size.
5.5 Medium
CVSS3