CVE-2023-3359
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
An issue was discovered in the Linux kernel brcm_nvram_parse in drivers/nvmem/brcm_nvram.c. Lacks for the check of the return value of kzalloc() can cause the NULL Pointer Dereference.
Risk Assessment
The lack of proper checking of the return value of kzalloc() may lead to system crashes, posing a risk to the stability and security of applications running on this kernel.
Recommendation
It is recommended to update the Linux kernel to the latest version that includes fixes for this vulnerability and to implement additional error checks in the code.
Original NVD description (English source)
An issue was discovered in the Linux kernel brcm_nvram_parse in drivers/nvmem/brcm_nvram.c. Lacks for the check of the return value of kzalloc() can cause the NULL Pointer Dereference.