CVE-2026-68192

The CVE concerns the Linux kernel driver brcmfmac (wifi). The issue arises in brcmf_pcie_release_scratchbuffers() where DMA buffers (shared.scratch and shared.ringupd) are freed with dma_free_coherent() but pointers are not cleared, unlike release_ringbuffers(). If reset teardown runs before remo...