CVE-2026-43144
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
06/05/2026
Last modified:
06/05/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
wifi: brcmfmac: Fix potential kernel oops when probe fails<br />
<br />
When probe of the sdio brcmfmac device fails for some reasons (i.e.<br />
missing firmware), the sdiodev->bus is set to error instead of NULL, thus<br />
the cleanup later in brcmf_sdio_remove() tries to free resources via<br />
invalid bus pointer. This happens because sdiodev->bus is set 2 times:<br />
first in brcmf_sdio_probe() and second time in brcmf_sdiod_probe(). Fix<br />
this by chaning the brcmf_sdio_probe() function to return the error code<br />
and set sdio->bus only there.



