kernel: wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: slab-out-of-bounds read in brcmfgetassocies Fix a slab-out-of-bounds read that occurs in kmemdup called from brcmfgetassocies. The bug could occur when associnfo-reqlen, data from a URB provided by a USB device, i...

RHEL 9 : kernel (RHSA-2025:21051)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21051 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: eventpoll: Fix semi-unbounded...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989681)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989681 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads This patch...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989992)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989992 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmfsdiodsglistrw This patch fixes a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988884)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988884 advisory. In the Linux kernel, the following vulnerability has been resolved: brcmfmac: pcie: Release firmwares in the brcmfpciesetup error path This avoids leaking memory if...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990189)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990189 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmfsdiodsglistrw This patch fixes a...

EUVD-2023-60043

Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting XSS via the Bulk Modifications tool. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

wifi: brcmfmac: Check the return value of of_property_read_string_index()

...

Linux Distros Unpatched Vulnerability : CVE-2023-53715

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex Apparently the hex passphrase mechanism does not work on newer chips/firmware e.g. BCM4387. It...

Siemens SIMATIC Devices Use After Free (CVE-2024-35811)

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix use-after-free bug in brcmfcfg80211detach This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

SUSE CVE-2023-53715

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex Apparently the hex passphrase mechanism does not work on newer chips/firmware e.g. BCM4387. It seems there was a simple way of passing it in binary all along, so use...

EUVD-2023-60026

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: use vector instructions only if available for ChaCha20 Commit 349d03ffd5f6 "crypto: s390 - add crypto library interface for ChaCha20" added a library interface to the s390 specific ChaCha20 implementation. However no...

DEBIAN-CVE-2023-53715

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex Apparently the hex passphrase mechanism does not work on newer chips/firmware e.g. BCM4387. It seems there was a simple way of passing it in binary all along, so use...

UBUNTU-CVE-2023-53715

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex Apparently the hex passphrase mechanism does not work on newer chips/firmware e.g. BCM4387. It seems there was a simple way of passing it in binary all along, so use...

CVE-2023-53715

CVE-2023-53715: In the Linux kernel wifi/brcmfmac cfg80211 path, the passphrase PMK is now passed in binary instead of hex to accommodate newer chips/firmware (e.g., BCM4387). The fix also clears the structure before setting the PMK to prevent leaking uninitialized stack contents to the device. O...

CVE-2023-53715 wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex Apparently the hex passphrase mechanism does not work on newer chips/firmware e.g. BCM4387. It seems there was a simple way of passing it in binary all along, so use...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987518)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987518 advisory. In the Linux kernel, the following vulnerability has been resolved: brcmfmac: pcie: Release firmwares in the brcmfpciesetup error path This avoids leaking memory if...

SUSE SLES12 Security Update : kernel (SUSE-SU-2025:03614-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03614-1 advisory. The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: -...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987686)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987686 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads This patch...

Linux Distros Unpatched Vulnerability : CVE-2022-50551

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmffwallocrequest This patch fixes a shift- out-of-bounds in brcmfmac that occurs in BITchiprev when a...