CVE Catalog

CVE-2026-53093

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.12%

2th percentile - higher than 2% of all known CVEs

Summary

In the Linux kernel, the brcmfmac driver for Broadcom Wi-Fi cards has a bug where the return value of brcmf_chip_add_core() is not checked for error pointers. This can lead to dereferencing an error pointer and potentially cause system instability.

Risk Assessment

The risk involves possible system hangs or Wi-Fi driver crashes, which can disrupt network services and affect system availability.

Recommendation

It is recommended to immediately update the Linux kernel to a version containing the fix that adds proper error pointer checks in the brcmfmac driver.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix error pointer dereference The function brcmf_chip_add_core() can return an error pointer and is not checked. Add checks for error pointer. Detected by Smatch: drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1010 brcmf_chip_recognition() error: 'core' dereferencing possible ERR_PTR() drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1013 brcmf_chip_recognition() error: 'core' dereferencing possible ERR_PTR() drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1016 brcmf_chip_recognition() error: 'core' dereferencing possible ERR_PTR() drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1019 brcmf_chip_recognition() error: 'core' dereferencing possible ERR_PTR() drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1022 brcmf_chip_recognition() error: 'core' dereferencing possible ERR_PTR() [add missing wifi: prefix]

Vulnerability data from NVD (NIST) · CISA KEV · EPSS