CVE-2026-43144 Details
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential kernel oops when probe fails When probe of the sdio brcmfmac device fails for some reasons (i.e. missing firmware), the sdiodev->bus is set to error instead of NULL, thus the cleanup later in brcmf_sdio_remove() tries to free resources via invalid bus pointer. This happens because sdiodev->bus is set 2 times: first in brcmf_sdio_probe() and second time in brcmf_sdiod_probe(). Fix this by chaning the brcmf_sdio_probe() function to return the error code and set sdio->bus only there.
A vulnerability in the Linux kernel's handling of the SDIO Broadcom 'brcmfmac' device can lead to a kernel oops error. This issue arises when the device probe fails, such as due to missing firmware. Instead of setting the bus pointer to NULL, the error state is applied, causing the cleanup function to attempt to free resources using an invalid bus pointer. The problem occurs because the bus pointer is assigned twice: first in 'brcmf_sdio_probe()' and again in 'brcmf_sdiod_probe()'. The vulnerability has been addressed by modifying 'brcmf_sdio_probe()' to return an error code and only set the bus pointer when the probe is successful.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for upgrading the Linux kernel can be found in the official Linux documentation.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/243307a0d1b0d01538e202c00454c28b21d4432e | kernel.org | Patch |
| https://git.kernel.org/stable/c/379aac7ee8240848aa35f605b06addb4617c863e | kernel.org | Patch |
| https://git.kernel.org/stable/c/64ccb0aac41c5055780c2a58bbe2c1b362ceccde | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-476 | NULL Pointer Dereference | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.13, < 6.18.16 >= 6.19, < 6.19.6 7.0 rc1 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 13, 2026 | Initial Analysis | [email protected] |
| May 6, 2026 | New CVE Received | kernel.org |