CVE-2026-43144

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
06/05/2026
Last modified:
06/05/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> wifi: brcmfmac: Fix potential kernel oops when probe fails<br /> <br /> When probe of the sdio brcmfmac device fails for some reasons (i.e.<br /> missing firmware), the sdiodev-&gt;bus is set to error instead of NULL, thus<br /> the cleanup later in brcmf_sdio_remove() tries to free resources via<br /> invalid bus pointer. This happens because sdiodev-&gt;bus is set 2 times:<br /> first in brcmf_sdio_probe() and second time in brcmf_sdiod_probe(). Fix<br /> this by chaning the brcmf_sdio_probe() function to return the error code<br /> and set sdio-&gt;bus only there.

Impact