CVE-2026-80949

wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control()

State: Published
Severity: Not scored
Published: Sep 11, 2026
Updated: Oct 19, 2026
Reserved: Aug 26, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control()

The memory allocated for buf is not freed in some of the error paths in brcmf_sdio_read_control(). Fix that by adding vfree() calls.

[arend: rework as suggested by Johannes]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	dd43a01c5cdb811adeb09e6a2d2788f8aa0d0969 to before b1d0a90a844abccdfed9fe141b5d0d654a821485Affected dd43a01c5cdb811adeb09e6a2d2788f8aa0d0969 to before 86b57fa3172e287bc083113507a965e6d9a46a45Affected dd43a01c5cdb811adeb09e6a2d2788f8aa0d0969 to before a732c4f36a4cd79f3702391f88ebb56f2e43b0eeAffected dd43a01c5cdb811adeb09e6a2d2788f8aa0d0969 to before 7704f6ba2a8c492b07a3eaa1e311b4b30d389246Affected dd43a01c5cdb811adeb09e6a2d2788f8aa0d0969 to before fdb880a7d575efe8b5c7b5b819b96d9251a3937fAffected dd43a01c5cdb811adeb09e6a2d2788f8aa0d0969 to before 261d7c7610b4b2f476382c88a2d1ae0cc5e07addAffected dd43a01c5cdb811adeb09e6a2d2788f8aa0d0969 to before ba04715ee672c336272be3ceb43bda9ffc33eb75Affected dd43a01c5cdb811adeb09e6a2d2788f8aa0d0969 to before 0d10db8e94fcb23a799789aaa696b4d8f937e207Affected
LinuxLinux	3.8Affected before 3.8Not affected 5.10.270 through 5.10.Not affected 5.15.221 through 5.15.Not affected 6.1.188 through 6.1.Not affected 6.6.157 through 6.6.Not affected 6.12.109 through 6.12.Not affected 6.18.50 through 6.18.Not affected 7.2.4 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

dd43a01c5cdb811adeb09e6a2d2788f8aa0d0969 to before b1d0a90a844abccdfed9fe141b5d0d654a821485Affected
dd43a01c5cdb811adeb09e6a2d2788f8aa0d0969 to before 86b57fa3172e287bc083113507a965e6d9a46a45Affected
dd43a01c5cdb811adeb09e6a2d2788f8aa0d0969 to before a732c4f36a4cd79f3702391f88ebb56f2e43b0eeAffected
dd43a01c5cdb811adeb09e6a2d2788f8aa0d0969 to before 7704f6ba2a8c492b07a3eaa1e311b4b30d389246Affected
dd43a01c5cdb811adeb09e6a2d2788f8aa0d0969 to before fdb880a7d575efe8b5c7b5b819b96d9251a3937fAffected
dd43a01c5cdb811adeb09e6a2d2788f8aa0d0969 to before 261d7c7610b4b2f476382c88a2d1ae0cc5e07addAffected
dd43a01c5cdb811adeb09e6a2d2788f8aa0d0969 to before ba04715ee672c336272be3ceb43bda9ffc33eb75Affected
dd43a01c5cdb811adeb09e6a2d2788f8aa0d0969 to before 0d10db8e94fcb23a799789aaa696b4d8f937e207Affected

LinuxLinux

3.8Affected
before 3.8Not affected
5.10.270 through 5.10.*Not affected
5.15.221 through 5.15.*Not affected
6.1.188 through 6.1.*Not affected
6.6.157 through 6.6.*Not affected
6.12.109 through 6.12.*Not affected
6.18.50 through 6.18.*Not affected
7.2.4 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.