CVE-2026-53093

wifi: brcmfmac: Fix error pointer dereference

State: Published
Severity: Not scored
Published: Jun 24, 2026
Updated: Jun 24, 2026
Reserved: Jun 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: brcmfmac: Fix error pointer dereference

The function brcmf_chip_add_core() can return an error pointer and is not checked. Add checks for error pointer.

Detected by Smatch: drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1010 brcmf_chip_recognition() error: 'core' dereferencing possible ERR_PTR()

drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1013 brcmf_chip_recognition() error: 'core' dereferencing possible ERR_PTR()

drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1016 brcmf_chip_recognition() error: 'core' dereferencing possible ERR_PTR()

drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1019 brcmf_chip_recognition() error: 'core' dereferencing possible ERR_PTR()

drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1022 brcmf_chip_recognition() error: 'core' dereferencing possible ERR_PTR()

[add missing wifi: prefix]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	cb7cf7be9eba76f3cd6258906074c72084570c84 to before a3b45090a91e2f0b9715870d8f8d9ca2fdfbc1afAffected cb7cf7be9eba76f3cd6258906074c72084570c84 to before 99ef547659178eef6d6ba4738a9d989ce90cf909Affected cb7cf7be9eba76f3cd6258906074c72084570c84 to before bd6c906e0c4af6d5d0c49c3c4ee090b4913da17dAffected cb7cf7be9eba76f3cd6258906074c72084570c84 to before d3f280be48f1c672cb10e8026c236d0cca60048aAffected cb7cf7be9eba76f3cd6258906074c72084570c84 to before 2e0e5a43ed126f896a4ad31ade66c90270601baeAffected cb7cf7be9eba76f3cd6258906074c72084570c84 to before cbea71b4480394708f9a6e007a0385acfe5e1ec8Affected cb7cf7be9eba76f3cd6258906074c72084570c84 to before 334c68750eee84c2327db1d152be83ff5ad8e20bAffected cb7cf7be9eba76f3cd6258906074c72084570c84 to before dd8592fc6007a451c3e4b9025de365e39de8178aAffected
LinuxLinux	3.15Affected before 3.15Not affected 5.10.258 through 5.10.Not affected 5.15.209 through 5.15.Not affected 6.1.175 through 6.1.Not affected 6.6.141 through 6.6.Not affected 6.12.91 through 6.12.Not affected 6.18.33 through 6.18.Not affected 7.0.10 through 7.0.*Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

cb7cf7be9eba76f3cd6258906074c72084570c84 to before a3b45090a91e2f0b9715870d8f8d9ca2fdfbc1afAffected
cb7cf7be9eba76f3cd6258906074c72084570c84 to before 99ef547659178eef6d6ba4738a9d989ce90cf909Affected
cb7cf7be9eba76f3cd6258906074c72084570c84 to before bd6c906e0c4af6d5d0c49c3c4ee090b4913da17dAffected
cb7cf7be9eba76f3cd6258906074c72084570c84 to before d3f280be48f1c672cb10e8026c236d0cca60048aAffected
cb7cf7be9eba76f3cd6258906074c72084570c84 to before 2e0e5a43ed126f896a4ad31ade66c90270601baeAffected
cb7cf7be9eba76f3cd6258906074c72084570c84 to before cbea71b4480394708f9a6e007a0385acfe5e1ec8Affected
cb7cf7be9eba76f3cd6258906074c72084570c84 to before 334c68750eee84c2327db1d152be83ff5ad8e20bAffected
cb7cf7be9eba76f3cd6258906074c72084570c84 to before dd8592fc6007a451c3e4b9025de365e39de8178aAffected

LinuxLinux

3.15Affected
before 3.15Not affected
5.10.258 through 5.10.*Not affected
5.15.209 through 5.15.*Not affected
6.1.175 through 6.1.*Not affected
6.6.141 through 6.6.*Not affected
6.12.91 through 6.12.*Not affected
6.18.33 through 6.18.*Not affected
7.0.10 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.