PT-2023-33659 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: A potential shift-out-of-bounds issue was identified in the brcmf fw alloc request function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2025-40745

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.14.0+ 132 Description A stack-out-of-bounds read issue exists in the brcmfmac component of the Linux kernel. This occurs when a CLM version string, which is not null-terminated, is passed as an argument to the...

[SECURITY] [DLA 3244-1] linux-5.10 security update

Debian LTS Advisory DLA-3244-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings December 20, 2022 https://wiki.debian.org/LTS Package : linux-5.10 Version : 5.10.158-2deb10u1 CVE ID : CVE-2021-3759 CVE-2022-3169 CVE-2022-3435 CVE-2022-3521 CVE-2022-3524 CVE-2022-3564...

GSD-2022-1008344 wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker()

wifi: brcmfmac: Fix potential buffer overflow in brcmffweheventworker This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.333 by commit...

GSD-2022-1008301 wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker()

wifi: brcmfmac: Fix potential buffer overflow in brcmffweheventworker This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.299 by commit...

GSD-2022-1008242 wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker()

wifi: brcmfmac: Fix potential buffer overflow in brcmffweheventworker This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.265 by commit...

GSD-2022-1008074 wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker()

wifi: brcmfmac: Fix potential buffer overflow in brcmffweheventworker This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.154 by commit...

GSD-2022-1007954 wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker()

wifi: brcmfmac: Fix potential buffer overflow in brcmffweheventworker This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.78 by commit...

CVE-2022-3628

A buffer overflow flaw was found in the Linux kernel Broadcom Full MAC Wi-Fi driver. This issue occurs when a user connects to a malicious USB device. This can allow a local user to crash the system or escalate their privileges. Mitigation To mitigate this issue, prevent the brcmfmac module from...

OESA-2022-2103 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: VUL-0: CVE-2022-3628: kernel: USB-accessible buffer overflow in Linux kernel driver brcmfmacCVE-2022-3628...

kernel: brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path

In the Linux kernel, the following vulnerability has been resolved: brcmfmac: pcie: Release firmwares in the brcmfpciesetup error path This avoids leaking memory if brcmfchipgetraminfo fails. Note that the CLM blob is released in the device remove path...

GSD-2022-1007580 wifi: brcmfmac: fix invalid address access when enabling SCAN log level

wifi: brcmfmac: fix invalid address access when enabling SCAN log level This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.296 by commit...

GSD-2022-1007576 wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()

wifi: brcmfmac: fix use-after-free bug in brcmfnetdevstartxmit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.296 by commit...

GSD-2022-1007501 wifi: brcmfmac: fix invalid address access when enabling SCAN log level

wifi: brcmfmac: fix invalid address access when enabling SCAN log level This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.262 by commit...

GSD-2022-1007499 wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()

wifi: brcmfmac: fix use-after-free bug in brcmfnetdevstartxmit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.262 by commit...

GSD-2022-1007389 wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()

wifi: brcmfmac: fix use-after-free bug in brcmfnetdevstartxmit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007040 wifi: brcmfmac: fix invalid address access when enabling SCAN log level

wifi: brcmfmac: fix invalid address access when enabling SCAN log level This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit...

GSD-2022-1006777 wifi: brcmfmac: fix invalid address access when enabling SCAN log level

wifi: brcmfmac: fix invalid address access when enabling SCAN log level This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006765 wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()

wifi: brcmfmac: fix use-after-free bug in brcmfnetdevstartxmit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

PT-2022-35496 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: A use-after-free bug was found in the brcmf netdev start xmit function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior...