CVE-2024-58014 – This CVE addresses an out-of-bounds read vulner... (How to Fix)

Q: What is the severity of CVE-2024-58014?

CVE-2024-58014 has a CVSS score of 7.1 (HIGH). This CVE addresses an out-of-bounds read vulnerability in the brcmsmac WiFi driver in the Linux kernel. The vulnerability could allow local attackers to read kernel memory, potentially leading to information disclosure or system crashes. Systems using affected Linux kernel versions with the brcmsmac driver are at risk.

📋 TL;DR

This CVE addresses an out-of-bounds read vulnerability in the brcmsmac WiFi driver in the Linux kernel. The vulnerability could allow local attackers to read kernel memory, potentially leading to information disclosure or system crashes. Systems using affected Linux kernel versions with the brcmsmac driver are at risk.

💻 Affected Systems

Products:

Linux kernel with brcmsmac WiFi driver

Versions: Specific affected kernel versions not specified in CVE, but patches exist in stable branches

Operating Systems: Linux distributions using affected kernel versions

Default Config Vulnerable: ⚠️ Yes

Notes: Only affects systems using the brcmsmac driver for Broadcom WiFi chipsets

📦 What is this software?

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Local attacker gains kernel memory read access, potentially exposing sensitive information or causing kernel panic leading to denial of service.

🟠

Likely Case

Local user triggers kernel warning (WARN) leading to system instability or crash, requiring reboot.

🟢

If Mitigated

Kernel warning is triggered but system remains operational with proper error handling.

🌐 Internet-Facing: LOW - This requires local access to the system.

🏢 Internal Only: MEDIUM - Local users or processes could exploit this vulnerability.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Requires local access and knowledge of driver interaction; compile-tested only according to description

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Patches available in stable kernel branches (see references)

Vendor Advisory: https://git.kernel.org/stable/c/093286c33409bf38896f2dab0c0bb6ca388afb33

Restart Required: Yes

Instructions:

1. Update Linux kernel to patched version 2. Reboot system 3. Verify kernel version and driver functionality

🔧 Temporary Workarounds

Disable brcmsmac driver

all

Blacklist or disable the vulnerable brcmsmac WiFi driver

echo 'blacklist brcmsmac' >> /etc/modprobe.d/blacklist.conf
rmmod brcmsmac

🧯 If You Can't Patch

Restrict local user access to systems with vulnerable driver
Implement strict privilege separation and limit local user capabilities

🔍 How to Verify

Check if Vulnerable:

Check if brcmsmac driver is loaded: lsmod | grep brcmsmac

Check Version:

uname -r

Verify Fix Applied:

Check kernel version is patched and driver loads without errors in dmesg

📡 Detection & Monitoring

Log Indicators:

Kernel WARN messages related to brcmsmac or wlc_phy_iqcal_gainparams_nphy
System crashes or kernel panics

Network Indicators:

Unusual WiFi driver behavior or disconnections

SIEM Query:

source="kernel" AND ("brcmsmac" OR "WARN" OR "out-of-bounds")

📊 Metadata

CVE ID: CVE-2024-58014

CVSS v3 Score: 7.1 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE: CWE-125

EPSS Score: 0.04% exploit probability (12.3th percentile)

Published: February 27, 2025

Last Updated: November 3, 2025

🔗 References

📤 Share & Export

📄 Export Markdown 📋 Export JSON

🔗 Related Vulnerabilities

If you're affected by CVE-2024-58014, you might also want to check these: