CVE-2026-68304

wifi: brcmfmac: fix 802.1X-SHA256 call trace warning

State: Published
Severity: Not scored
Published: Aug 10, 2026
Updated: Aug 19, 2026
Reserved: Jul 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: brcmfmac: fix 802.1X-SHA256 call trace warning

Based on wpa_auth as 1x_256 mode, need to set up "use_fwsup" with BRCMF_PROFILE_FWSUP_1X. Or it will happen trace warning when call brcmf_cfg80211_set_pmk().

[ 4481.831101] ------------[ cut here ]------------ [ 4481.831102] WARNING: CPU: 1 PID: 2997 at drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c:7242 brcmf_cfg80211_set_pmk+0x77/0xd0 [brcmfmac] [...] [ 4481.831202] Call Trace: [ 4481.831204] <TASK> [ 4481.831205] nl80211_set_pmk+0x183/0x250 [cfg80211] [ 4481.831233] genl_family_rcv_msg_doit+0xea/0x150 [ 4481.831237] genl_rcv_msg+0x104/0x240 [ 4481.831239] ? cfg80211_probe_status+0x2c0/0x2c0 [cfg80211] [ 4481.831257] ? genl_family_rcv_msg_doit+0x150/0x150 [ 4481.831259] netlink_rcv_skb+0x4e/0x100 [ 4481.831261] genl_rcv+0x24/0x40 [ 4481.831262] netlink_unicast+0x236/0x380 [ 4481.831264] netlink_sendmsg+0x250/0x4b0 [ 4481.831266] sock_sendmsg+0x5c/0x70 [ 4481.831269] ____sys_sendmsg+0x236/0x2b0 [ 4481.831271] ? copy_msghdr_from_user+0x6d/0xa0 [ 4481.831272] ___sys_sendmsg+0x86/0xd0 [ 4481.831274] ? avc_has_perm+0x8c/0x1a0 [ 4481.831276] ? preempt_count_add+0x6a/0xa0 [ 4481.831279] ? sock_has_perm+0x82/0xa0 [ 4481.831280] __sys_sendmsg+0x57/0xa0 [ 4481.831282] do_syscall_64+0x38/0x90 [ 4481.831284] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 4481.831286] RIP: 0033:0x7fd270d369b4

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	2526ff21aa77c205f72e8263335f20b7d7e636fc to before fe27cc1feecde0e6a0a9a04b7ad3262ed5f99252Affected 2526ff21aa77c205f72e8263335f20b7d7e636fc to before 47989a233df369c2c2263ab0a5cbd8c8dad253a5Affected 2526ff21aa77c205f72e8263335f20b7d7e636fc to before d0395840e3266397de94ecd3c91e1c188c7667c6Affected 2526ff21aa77c205f72e8263335f20b7d7e636fc to before 137e4710da626290495b174e2eb1d5e889a4b165Affected 2526ff21aa77c205f72e8263335f20b7d7e636fc to before d3ac5b35ec85c41ccf8ec524d47b520e72edaca1Affected 2526ff21aa77c205f72e8263335f20b7d7e636fc to before 00ebbf030d8c4a1cb89cbbae15e28332373649dbAffected 2526ff21aa77c205f72e8263335f20b7d7e636fc to before bd4fac033bb95fcad898cf6734e869991b2561cbAffected 2526ff21aa77c205f72e8263335f20b7d7e636fc to before 7cb34f6c4fe8a68af621d870abe63bfca2275dd6Affected
LinuxLinux	4.13Affected before 4.13Not affected 5.10.265 through 5.10.Not affected 5.15.216 through 5.15.Not affected 6.1.183 through 6.1.Not affected 6.6.148 through 6.6.Not affected 6.12.101 through 6.12.Not affected 6.18.42 through 6.18.Not affected 7.1.6 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

2526ff21aa77c205f72e8263335f20b7d7e636fc to before fe27cc1feecde0e6a0a9a04b7ad3262ed5f99252Affected
2526ff21aa77c205f72e8263335f20b7d7e636fc to before 47989a233df369c2c2263ab0a5cbd8c8dad253a5Affected
2526ff21aa77c205f72e8263335f20b7d7e636fc to before d0395840e3266397de94ecd3c91e1c188c7667c6Affected
2526ff21aa77c205f72e8263335f20b7d7e636fc to before 137e4710da626290495b174e2eb1d5e889a4b165Affected
2526ff21aa77c205f72e8263335f20b7d7e636fc to before d3ac5b35ec85c41ccf8ec524d47b520e72edaca1Affected
2526ff21aa77c205f72e8263335f20b7d7e636fc to before 00ebbf030d8c4a1cb89cbbae15e28332373649dbAffected
2526ff21aa77c205f72e8263335f20b7d7e636fc to before bd4fac033bb95fcad898cf6734e869991b2561cbAffected
2526ff21aa77c205f72e8263335f20b7d7e636fc to before 7cb34f6c4fe8a68af621d870abe63bfca2275dd6Affected

LinuxLinux

4.13Affected
before 4.13Not affected
5.10.265 through 5.10.*Not affected
5.15.216 through 5.15.*Not affected
6.1.183 through 6.1.*Not affected
6.6.148 through 6.6.*Not affected
6.12.101 through 6.12.*Not affected
6.18.42 through 6.18.*Not affected
7.1.6 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.