Vulnerability Database

320,116

Total vulnerabilities in the database

CVE-2024-27413

In the Linux kernel, the following vulnerability has been resolved:

efi/capsule-loader: fix incorrect allocation size

gcc-14 notices that the allocation with sizeof(void) on 32-bit architectures is not enough for a 64-bit phys_addr_t:

drivers/firmware/efi/capsule-loader.c: In function 'efi_capsule_open': drivers/firmware/efi/capsule-loader.c:295:24: error: allocation of insufficient size '4' for type 'phys_addr_t' {aka 'long long unsigned int'} with size '8' [-Werror=alloc-size] 295 | cap_info->phys = kzalloc(sizeof(void *), GFP_KERNEL); | ^

Use the correct type instead here.

  • Published: May 17, 2024
  • Updated: Dec 18, 2025
  • CVE: CVE-2024-27413
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.5
  • AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

No CWE or OWASP classifications available.

Software From Fixed in
linux / linux_kernel 4.14.13 4.15
linux / linux_kernel 4.15.1 4.19.309
linux / linux_kernel 4.20 5.4.271
linux / linux_kernel 5.5 5.10.212
linux / linux_kernel 5.11 5.15.151
linux / linux_kernel 5.16 6.1.81
linux / linux_kernel 6.2 6.6.21
linux / linux_kernel 6.7 6.7.9
linux / linux_kernel 4.15 4.15.x
linux / linux_kernel 4.15-rc7 4.15-rc7.x
linux / linux_kernel 4.15-rc8 4.15-rc8.x
linux / linux_kernel 4.15-rc9 4.15-rc9.x
linux / linux_kernel 6.8-rc1 6.8-rc1.x
linux / linux_kernel 6.8-rc2 6.8-rc2.x
linux / linux_kernel 6.8-rc3 6.8-rc3.x
linux / linux_kernel 6.8-rc4 6.8-rc4.x
linux / linux_kernel 6.8-rc5 6.8-rc5.x
linux / linux_kernel 6.8-rc6 6.8-rc6.x
debian / debian_linux 10.0 10.0.x