87 matches found
kernel: wifi: brcmfmac: validate bsscfg indices in IF events
A flaw was found in the Linux kernel's brcmfmac Wi-Fi driver. This vulnerability occurs because the driver fails to properly validate bsscfg indices in interface IF events. An attacker could exploit this by sending a specially crafted IF event with an invalid bsscfg index, which could lead to an...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the b43rx function in the b43 driver. This function fails to perform forced boundary checks on th...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15
A problem with out-of-bound reading was detected in brcmfmac/cfg80211.c within the drivers/net/wireless/broadcom/brcm80211 directory of the Linux kernel. This issue can occur when the associnfo-reqlen data is larger than the size of the buffer, which is defined as WLEXTRABUFMAX, resulting in a...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007428)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007428 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix invalid address access when enabling SCAN log level The variable i is changed...
The vulnerability of the brcmf_pno_set_random() function in the drivers/net/wireless/broadcom/brcm80211/brcmfmac/pno.c file of the Broadcom wireless adapter driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the brcmfmac/pno.c function in the drivers/net/wireless/broadcom/brcm80211/brcmfmac driver for Broadcom wireless connectivity in the Linux operating system is related to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a...
The vulnerability in the function brcmf_netdev_start_xmit() of the drivers/net/wireless/broadcom/brcm80211/brcmfmac/core.c driver for Broadcom wireless adapter drivers in the Linux operating system, which allows a hacker to cause a service failure.
The vulnerability of the brcmfnetdevstartxmit function in the drivers/net/wireless/broadcom/brcm80211/brcmfmac/core.c file of the Broadcom wireless adapter driver in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a...
The vulnerability of the `brcmfmac/pcie.c` function in the `driver/net/wireless/broadcom/brcm80211/brcmfmac` module of the Broadcom wireless adapter driver for Linux operating systems allows a hacker to cause a system failure.
The vulnerability of the brcmfpcieinitRingbuffers function in the drivers/net/wireless/broadcom/brcm80211/brcmfmac/pcie.c file of the Broadcom wireless adapter driver in the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an...
The vulnerability of the `brcmfmac/cfg80211.c` file within the `drivers/net/wireless/broadcom/brcm80211/brcmfmac` module of the Broadcom wireless driver for the Linux operating system allows a hacker to gain access to protected information or cause a service failure.
The vulnerability of the brcmfmac/cfg80211.c file within the Broadcom wireless driver framework’s drivers/net/wireless/broadcom/brcm80211/ directory is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to access protected information or cause system failure...
The vulnerability of the brcmf_c_preinit_dcmds() function in the drivers/net/wireless/broadcom/brcm80211/brcmfmac/common.c file of the Broadcom wireless adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the brcmfcpreinitdcmds function in the drivers/net/wireless/broadcom/brcm80211/brcmfmac/common.c file of the Broadcom wireless driver for the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the brcmf_c_preinit_dcmds() function in the drivers/net/wireless/broadcom/brcm80211/brcmfmac/common.c file of the Broadcom wireless adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the brcmfcpreinitdcmds function in the drivers/net/wireless/broadcom/brcm80211/brcmfmac/common.c file of the Broadcom wireless adapter driver in the Linux operating system kernel is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an...
ROS-20260119-7347
A vulnerability in the brcmftxfinalize function of the drivers/net/wireless/broadcom/brcm80211/brcmfmac/core.c component of the Linux operating system kernel is related to pointer dereferencing errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
Unity Linux 20.1060a Security Update: kernel (UTSA-2026-004377)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004377 advisory. The brcm80211 component in the Linux kernel through 6.5.10 has a brcmfcfg80211detach use-after-free in the device unplugging disconnect the USB by hotplug code. For...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000910)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000910 advisory. A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37351060. References: B-V2017060101...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003330)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003330 advisory. Stack-based buffer overflow in the brcmfcfg80211startap function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux kernel before 4.7.5 allo...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002008)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002008 advisory. Format string vulnerability in the b43requestfirmware function in drivers/net/wireless/b43/main.c in the Broadcom B43 wireless driver in the Linux kernel through 3.9...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002938)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002938 advisory. A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37351060. References: B-V2017060101...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002476)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002476 advisory. Format string vulnerability in the b43requestfirmware function in drivers/net/wireless/b43/main.c in the Broadcom B43 wireless driver in the Linux kernel through 3.9...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an invalid address access in brcmfmac, which could cause the kernel to crash...
CVE-2023-53715 wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex Apparently the hex passphrase mechanism does not work on newer chips/firmware e.g. BCM4387. It seems there was a simple way of passing it in binary all along, so use...
