CVE-2025-37990

wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()

State: Published
Severity: Not scored
Published: May 20, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()

The function brcmf_usb_dl_writeimage() calls the function brcmf_usb_dl_cmd() but dose not check its return value. The 'state.state' and the 'state.bytes' are uninitialized if the function brcmf_usb_dl_cmd() fails. It is dangerous to use uninitialized variables in the conditions.

Add error handling for brcmf_usb_dl_cmd() to jump to error handling path if the brcmf_usb_dl_cmd() fails and the 'state.state' and the 'state.bytes' are uninitialized.

Improve the error message to report more detailed error information.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	71bb244ba2fd5390eefe4ee9054abdb3f8b05922 to before 972bf75e53f778c78039c5d139dd47443a6d66a1Affected 71bb244ba2fd5390eefe4ee9054abdb3f8b05922 to before 62a4f2955d9a1745bdb410bf83fb16666d8865d6Affected 71bb244ba2fd5390eefe4ee9054abdb3f8b05922 to before 508be7c001437bacad7b9a43f08a723887bcd1eaAffected 71bb244ba2fd5390eefe4ee9054abdb3f8b05922 to before 524b70441baba453b193c418e3142bd31059cc1fAffected 71bb244ba2fd5390eefe4ee9054abdb3f8b05922 to before 08424a0922fb9e32a19b09d852ee87fb6c497538Affected 71bb244ba2fd5390eefe4ee9054abdb3f8b05922 to before bdb435ef9815b1ae28eefffa01c6959d0fcf1fa7Affected 71bb244ba2fd5390eefe4ee9054abdb3f8b05922 to before fa9b9f02212574ee1867fbefb0a675362a71b31dAffected 71bb244ba2fd5390eefe4ee9054abdb3f8b05922 to before 8e089e7b585d95122c8122d732d1d5ef8f879396Affected
LinuxLinux	3.4Affected before 3.4Not affected 5.4.294 through 5.4.Not affected 5.10.238 through 5.10.Not affected 5.15.182 through 5.15.Not affected 6.1.138 through 6.1.Not affected 6.6.90 through 6.6.Not affected 6.12.28 through 6.12.Not affected 6.14.6 through 6.14.*Not affected 6.15 and laterNot affected

Product

Versions

LinuxLinux

71bb244ba2fd5390eefe4ee9054abdb3f8b05922 to before 972bf75e53f778c78039c5d139dd47443a6d66a1Affected
71bb244ba2fd5390eefe4ee9054abdb3f8b05922 to before 62a4f2955d9a1745bdb410bf83fb16666d8865d6Affected
71bb244ba2fd5390eefe4ee9054abdb3f8b05922 to before 508be7c001437bacad7b9a43f08a723887bcd1eaAffected
71bb244ba2fd5390eefe4ee9054abdb3f8b05922 to before 524b70441baba453b193c418e3142bd31059cc1fAffected
71bb244ba2fd5390eefe4ee9054abdb3f8b05922 to before 08424a0922fb9e32a19b09d852ee87fb6c497538Affected
71bb244ba2fd5390eefe4ee9054abdb3f8b05922 to before bdb435ef9815b1ae28eefffa01c6959d0fcf1fa7Affected
71bb244ba2fd5390eefe4ee9054abdb3f8b05922 to before fa9b9f02212574ee1867fbefb0a675362a71b31dAffected
71bb244ba2fd5390eefe4ee9054abdb3f8b05922 to before 8e089e7b585d95122c8122d732d1d5ef8f879396Affected

LinuxLinux

3.4Affected
before 3.4Not affected
5.4.294 through 5.4.*Not affected
5.10.238 through 5.10.*Not affected
5.15.182 through 5.15.*Not affected
6.1.138 through 6.1.*Not affected
6.6.90 through 6.6.*Not affected
6.12.28 through 6.12.*Not affected
6.14.6 through 6.14.*Not affected
6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.