In the Linux kernel, the following vulnerability has been resolved:
efi/capsule-loader: fix incorrect allocation size
gcc-14 notices that the allocation with sizeof(void) on 32-bit architectures is not enough for a 64-bit physaddrt:
drivers/firmware/efi/capsule-loader.c: In function 'eficapsuleopen': drivers/firmware/efi/capsule-loader.c:295:24: error: allocation of insufficient size '4' for type 'physaddrt' {aka 'long long unsigned int'} with size '8' [-Werror=alloc-size] 295 | capinfo->phys = kzalloc(sizeof(void *), GFPKERNEL); | ^
Use the correct type instead here.
[ { "signature_type": "Line", "id": "CVE-2024-27413-02040081", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@11aabd7487857b8e7d768fefb092f66dfde68492", "signature_version": "v1", "target": { "file": "drivers/firmware/efi/capsule-loader.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "22918348708764426387243249996970049522", "105998380872770877097770619875893914196", "289203312368126418423883154341529462418", "227958369331355233192009378954648955782" ] }, "deprecated": false }, { "signature_type": "Line", "id": "CVE-2024-27413-1426d00f", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fccfa646ef3628097d59f7d9c1a3e84d4b6bb45e", "signature_version": "v1", "target": { "file": "drivers/firmware/efi/capsule-loader.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "22918348708764426387243249996970049522", "105998380872770877097770619875893914196", "289203312368126418423883154341529462418", "227958369331355233192009378954648955782" ] }, "deprecated": false }, { "signature_type": "Line", "id": "CVE-2024-27413-14f79154", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@537e3f49dbe88881a6f0752beaa596942d9efd64", "signature_version": "v1", "target": { "file": "drivers/firmware/efi/capsule-loader.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "22918348708764426387243249996970049522", "105998380872770877097770619875893914196", "289203312368126418423883154341529462418", "227958369331355233192009378954648955782" ] }, "deprecated": false }, { "signature_type": "Function", "id": "CVE-2024-27413-4a7bc697", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@537e3f49dbe88881a6f0752beaa596942d9efd64", "signature_version": "v1", "target": { "function": "efi_capsule_open", "file": "drivers/firmware/efi/capsule-loader.c" }, "digest": { "function_hash": "137776580995182282006860296133680976560", "length": 472.0 }, "deprecated": false }, { "signature_type": "Line", "id": "CVE-2024-27413-51b8dc3d", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@00cf21ac526011a29fc708f8912da446fac19f7b", "signature_version": "v1", "target": { "file": "drivers/firmware/efi/capsule-loader.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "22918348708764426387243249996970049522", "105998380872770877097770619875893914196", "289203312368126418423883154341529462418", "227958369331355233192009378954648955782" ] }, "deprecated": false }, { "signature_type": "Function", "id": "CVE-2024-27413-5f4206db", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@00cf21ac526011a29fc708f8912da446fac19f7b", "signature_version": "v1", "target": { "function": "efi_capsule_open", "file": "drivers/firmware/efi/capsule-loader.c" }, "digest": { "function_hash": "137776580995182282006860296133680976560", "length": 472.0 }, "deprecated": false }, { "signature_type": "Line", "id": "CVE-2024-27413-785c9b67", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b73473c050a612fb4317831371073eda07c3050", "signature_version": "v1", "target": { "file": "drivers/firmware/efi/capsule-loader.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "22918348708764426387243249996970049522", "105998380872770877097770619875893914196", "289203312368126418423883154341529462418", "227958369331355233192009378954648955782" ] }, "deprecated": false }, { "signature_type": "Function", "id": "CVE-2024-27413-7a4f8b5f", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@62a5dcd9bd3097e9813de62fa6f22815e84a0172", "signature_version": "v1", "target": { "function": "efi_capsule_open", "file": "drivers/firmware/efi/capsule-loader.c" }, "digest": { "function_hash": "137776580995182282006860296133680976560", "length": 472.0 }, "deprecated": false }, { "signature_type": "Function", "id": "CVE-2024-27413-7f4e3b7d", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@950d4d74d311a18baed6878dbfba8180d7e5dddd", "signature_version": "v1", "target": { "function": "efi_capsule_open", "file": "drivers/firmware/efi/capsule-loader.c" }, "digest": { "function_hash": "137776580995182282006860296133680976560", "length": 472.0 }, "deprecated": false }, { "signature_type": "Line", "id": "CVE-2024-27413-89dfa804", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ddc547dd05a46720866c32022300f7376c40119f", "signature_version": "v1", "target": { "file": "drivers/firmware/efi/capsule-loader.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "22918348708764426387243249996970049522", "105998380872770877097770619875893914196", "289203312368126418423883154341529462418", "227958369331355233192009378954648955782" ] }, "deprecated": false }, { "signature_type": "Function", "id": "CVE-2024-27413-91a66df9", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b73473c050a612fb4317831371073eda07c3050", "signature_version": "v1", "target": { "function": "efi_capsule_open", "file": "drivers/firmware/efi/capsule-loader.c" }, "digest": { "function_hash": "137776580995182282006860296133680976560", "length": 472.0 }, "deprecated": false }, { "signature_type": "Line", "id": "CVE-2024-27413-98ac2667", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@950d4d74d311a18baed6878dbfba8180d7e5dddd", "signature_version": "v1", "target": { "file": "drivers/firmware/efi/capsule-loader.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "22918348708764426387243249996970049522", "105998380872770877097770619875893914196", "289203312368126418423883154341529462418", "227958369331355233192009378954648955782" ] }, "deprecated": false }, { "signature_type": "Function", "id": "CVE-2024-27413-9f603da2", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fccfa646ef3628097d59f7d9c1a3e84d4b6bb45e", "signature_version": "v1", "target": { "function": "efi_capsule_open", "file": "drivers/firmware/efi/capsule-loader.c" }, "digest": { "function_hash": "137776580995182282006860296133680976560", "length": 472.0 }, "deprecated": false }, { "signature_type": "Function", "id": "CVE-2024-27413-c4d5742d", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ddc547dd05a46720866c32022300f7376c40119f", "signature_version": "v1", "target": { "function": "efi_capsule_open", "file": "drivers/firmware/efi/capsule-loader.c" }, "digest": { "function_hash": "137776580995182282006860296133680976560", "length": 472.0 }, "deprecated": false }, { "signature_type": "Function", "id": "CVE-2024-27413-de27dcc4", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@11aabd7487857b8e7d768fefb092f66dfde68492", "signature_version": "v1", "target": { "function": "efi_capsule_open", "file": "drivers/firmware/efi/capsule-loader.c" }, "digest": { "function_hash": "137776580995182282006860296133680976560", "length": 472.0 }, "deprecated": false }, { "signature_type": "Line", "id": "CVE-2024-27413-e30ae6b8", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@62a5dcd9bd3097e9813de62fa6f22815e84a0172", "signature_version": "v1", "target": { "file": "drivers/firmware/efi/capsule-loader.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "22918348708764426387243249996970049522", "105998380872770877097770619875893914196", "289203312368126418423883154341529462418", "227958369331355233192009378954648955782" ] }, "deprecated": false } ]