CVE-2025-40321 wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode

🗓️ 08 Dec 2025 00:46:48Reported by LinuxType

Fix brcmfmac crash when sending Action Frames in standalone AP mode caused by uninitialized P2P vif.

Reporter	Title	Published	Views	Family All 256
AstraLinux	Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1	24 Jun 202615:11	–	astralinux
CBLMariner	CVE-2025-40321 affecting package kernel for versions less than 6.6.117.1-1	15 Dec 202516:03	–	cbl_mariner
Circl	CVE-2025-40321	19 Mar 202600:00	–	circl
CNNVD	Linux kernel 安全漏洞	8 Dec 202500:00	–	cnnvd
CVE	CVE-2025-40321	8 Dec 202500:46	–	cve
Debian	[SECURITY] [DLA 4404-1] linux security update	12 Dec 202513:38	–	debian
Debian	[SECURITY] [DLA 4436-1] linux-6.1 security update	14 Jan 202613:50	–	debian
Debian CVE	CVE-2025-40321	8 Dec 202500:46	–	debiancve
Tenable Nessus	Debian dla-4404 : ata-modules-5.10.0-35-armmp-di - security update	12 Dec 202500:00	–	nessus
Tenable Nessus	Debian dla-4436 : linux-config-6.1 - security update	14 Jan 202600:00	–	nessus

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c",
      "drivers/net/wireless/broadcom/brcm80211/brcmfmac/p2p.c",
      "drivers/net/wireless/broadcom/brcm80211/brcmfmac/p2p.h"
    ],
    "versions": [
      {
        "version": "18e2f61db3b708e0a22ccc403cb6ab2203d6faab",
        "lessThan": "c863b9c7b4e9af0b7931cb791ec91971a50f1a25",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "18e2f61db3b708e0a22ccc403cb6ab2203d6faab",
        "lessThan": "e1fc9afcce9139791260f962541282d47fbb508d",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "18e2f61db3b708e0a22ccc403cb6ab2203d6faab",
        "lessThan": "55f60a72a178909ece4e32987e4c642ba57e1cf4",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "18e2f61db3b708e0a22ccc403cb6ab2203d6faab",
        "lessThan": "c2b0f8d3e7358c33d90f0e62765d474f25f26a45",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "18e2f61db3b708e0a22ccc403cb6ab2203d6faab",
        "lessThan": "64e3175d1c8a3bea02032e7c9d1befd5f43786fa",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "18e2f61db3b708e0a22ccc403cb6ab2203d6faab",
        "lessThan": "a6eed58249e7d60f856900e682992300f770f64b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "18e2f61db3b708e0a22ccc403cb6ab2203d6faab",
        "lessThan": "dbc7357b6aae686d9404e1dd7e2e6cf92c3a1b5a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "18e2f61db3b708e0a22ccc403cb6ab2203d6faab",
        "lessThan": "3776c685ebe5f43e9060af06872661de55e80b9a",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c",
      "drivers/net/wireless/broadcom/brcm80211/brcmfmac/p2p.c",
      "drivers/net/wireless/broadcom/brcm80211/brcmfmac/p2p.h"
    ],
    "versions": [
      {
        "version": "3.9",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "3.9",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.4.302",
        "lessThanOrEqual": "5.4.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.247",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.197",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.159",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.117",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.58",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.17.8",
        "lessThanOrEqual": "6.17.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/3776c685ebe5f43e9060af06872661de55e80b9a
git	www.git.kernel.org/stable/c/64e3175d1c8a3bea02032e7c9d1befd5f43786fa
git	www.git.kernel.org/stable/c/e1fc9afcce9139791260f962541282d47fbb508d
git	www.git.kernel.org/stable/c/dbc7357b6aae686d9404e1dd7e2e6cf92c3a1b5a
git	www.git.kernel.org/stable/c/55f60a72a178909ece4e32987e4c642ba57e1cf4
git	www.git.kernel.org/stable/c/c2b0f8d3e7358c33d90f0e62765d474f25f26a45
git	www.git.kernel.org/stable/c/c863b9c7b4e9af0b7931cb791ec91971a50f1a25
git	www.git.kernel.org/stable/c/a6eed58249e7d60f856900e682992300f770f64b

11 May 2026 21:47Current

EPSS0.00175