CVE-2023-53715: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex Apparently the hex passphrase mechanism does not work on newer chips/firmware e.g. BCM4387. It seems there was a simple way of passing it in binary all along, so use...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987518)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987518 advisory. In the Linux kernel, the following vulnerability has been resolved: brcmfmac: pcie: Release firmwares in the brcmfpciesetup error path This avoids leaking memory if...

SUSE SLES12 Security Update : kernel (SUSE-SU-2025:03614-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03614-1 advisory. The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: -...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987686)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987686 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads This patch...

PT-2025-49450

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel’s brcmfmac driver contains a flaw related to handling Action frames in standalone Access Point AP mode. Specifically, when hostapd manages the WLAN interface, the driver...

Linux Distros Unpatched Vulnerability : CVE-2022-50551

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmffwallocrequest This patch fixes a shift- out-of-bounds in brcmfmac that occurs in BITchiprev when a...

Linux Distros Unpatched Vulnerability : CVE-2023-53582

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds Fix a stack-out-of- bounds read in brcmfmac that occurs when 'buf' that is...

Linux Distros Unpatched Vulnerability : CVE-2023-53565

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Check for probe id argument being NULL The probe id argument may be NULL in ...

CVE-2022-50551

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmffwallocrequest This patch fixes a shift-out-of-bounds in brcmfmac that occurs in BITchiprev when a 'chiprev' provided by the device is too large. It should also not be equ...

UBUNTU-CVE-2022-50551

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmffwallocrequest This patch fixes a shift-out-of-bounds in brcmfmac that occurs in BITchiprev when a 'chiprev' provided by the device is too large. It should also not be equ...

EUVD-2025-32813

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmffwallocrequest This patch fixes a shift-out-of-bounds in brcmfmac that occurs in BITchiprev when a 'chiprev' provided by the device is too large. It should also not be equ...

CVE-2022-50551

CVE-2022-50551 refers to a Linux kernel vulnerability in the brcmfmac wireless driver where a shift-out-of-bounds could occur during firmware allocation due to an oversized chiprev value used in BIT(chiprev). The patch adds a guard so the function brcmf_fw_alloc_request() returns NULL if chiprev ...

CVE-2022-50551

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmffwallocrequest This patch fixes a shift-out-of-bounds in brcmfmac that occurs in BITchiprev when a 'chiprev' provided by the device is too large. It should also not be equ...

CVE-2022-50551 wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request()

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmffwallocrequest This patch fixes a shift-out-of-bounds in brcmfmac that occurs in BITchiprev when a 'chiprev' provided by the device is too large. It should also not be equ...

CVE-2022-50551 wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request()

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmffwallocrequest This patch fixes a shift-out-of-bounds in brcmfmac that occurs in BITchiprev when a 'chiprev' provided by the device is too large. It should also not be equ...

CVE-2022-50551: Out-of-bounds Read

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmffwallocrequest This patch fixes a shift-out-of-bounds in brcmfmac that occurs in BITchiprev when a 'chiprev' provided by the device is too large. It should also not be equ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414320)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414320 advisory. A slab-out-of-bound read problem was found in brcmfgetassocies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel. This issue could...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-390227)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-390227 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix use-after-free bug in brcmfcfg80211detach This is the candidate patch of...

SUSE CVE-2023-53565

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Check for probe id argument being NULL The probe id argument may be NULL in 2 scenarios: 1. brcmfpciepmleaveD3 calling brcmfpcieprobe to reprobe the device. 2. If a user tries to manually bind the driver from sysf...

SUSE CVE-2023-53582

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds Fix a stack-out-of-bounds read in brcmfmac that occurs when 'buf' that is not null-terminated is passed as an argument of strreplace in...