CVE-2024-27413

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> efi/capsule-loader: fix incorrect allocation size<br /> <br /> gcc-14 notices that the allocation with sizeof(void) on 32-bit architectures<br /> is not enough for a 64-bit phys_addr_t:<br /> <br /> drivers/firmware/efi/capsule-loader.c: In function &amp;#39;efi_capsule_open&amp;#39;:<br /> drivers/firmware/efi/capsule-loader.c:295:24: error: allocation of insufficient size &amp;#39;4&amp;#39; for type &amp;#39;phys_addr_t&amp;#39; {aka &amp;#39;long long unsigned int&amp;#39;} with size &amp;#39;8&amp;#39; [-Werror=alloc-size]<br /> 295 | cap_info-&gt;phys = kzalloc(sizeof(void *), GFP_KERNEL);<br /> | ^<br /> <br /> Use the correct type instead here.