Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-43144

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential kernel oops when probe fails When probe of the sdio brcmfmac device fails for some reasons (i.e. missing firmware), the sdiodev->bus is set to error instead of NULL, thus the cleanup later in brcmf_sdio_remove() tries to free resources via invalid bus pointer. This happens because sdiodev->bus is set 2 times: first in brcmf_sdio_probe() and second time in brcmf_sdiod_probe(). Fix this by chaning t
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:7549b45f6e906415dc47ddbd28126230508a5eaa065c685b68426397917037de
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c","drivers/net/wireless/broadcom/brcm80211/brcmfmac/sdio.c","drivers/net/wireless/broadcom/brcm80211/brcmfmac/sdio.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"64ccb0aac41c5055780c2a58bbe2c1b362ceccde","status":"affected","version":"0ff0843310b74e565901d85f849fb308c3b1f220","versionType":"git"},{"lessThan":"379aac7ee8240848aa35f605b06addb4617c863e","status":"affected","version":"0ff0843310b74e565901d…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:193f3f75e0b2f94cb0341c28b9ca80f98fa310010a4e40c0e0fa68e31f71e343 · sha256:320bfb8fb1b9db02… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c","drivers/net/wireless/broadcom/brcm80211/brcmfmac/sdio.c","drivers/net/wireless/broadcom/brcm80211/brcmfmac/sdio.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.13"},{"lessThan":"6.13","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.16","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffect…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:193f3f75e0b2f94cb0341c28b9ca80f98fa310010a4e40c0e0fa68e31f71e343 · sha256:320bfb8fb1b9db02… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c","drivers/net/wireless/broadcom/brcm80211/brcmfmac/sdio.c","drivers/net/wireless/broadcom/brcm80211/brcmfmac/sdio.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"64ccb0aac41c5055780c2a58bbe2c1b362ceccde","status":"affected","version":"0ff0843310b74e565901d85f849fb308c3b1f220","versionType":"git"},{"lessThan":"379aac7ee8240848aa35f605b06addb4617c863e","status":"affected","version":"0ff0843310b74e565901d…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:193f3f75e0b2f94cb0341c28b9ca80f98fa310010a4e40c0e0fa68e31f71e343 · sha256:320bfb8fb1b9db02… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c","drivers/net/wireless/broadcom/brcm80211/brcmfmac/sdio.c","drivers/net/wireless/broadcom/brcm80211/brcmfmac/sdio.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.13"},{"lessThan":"6.13","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.16","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffect…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:193f3f75e0b2f94cb0341c28b9ca80f98fa310010a4e40c0e0fa68e31f71e343 · sha256:320bfb8fb1b9db02… · /containers/cna/affected/1

Source references

3 source assertions
{"url":"https://git.kernel.org/stable/c/243307a0d1b0d01538e202c00454c28b21d4432e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:193f3f75e0b2f94cb0341c28b9ca80f98fa310010a4e40c0e0fa68e31f71e343 · sha256:320bfb8fb1b9db02… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/379aac7ee8240848aa35f605b06addb4617c863e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:193f3f75e0b2f94cb0341c28b9ca80f98fa310010a4e40c0e0fa68e31f71e343 · sha256:320bfb8fb1b9db02… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/64ccb0aac41c5055780c2a58bbe2c1b362ceccde"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:193f3f75e0b2f94cb0341c28b9ca80f98fa310010a4e40c0e0fa68e31f71e343 · sha256:320bfb8fb1b9db02… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer