CVE-2026-43144
kernel: wifi: brcmfmac: Fix potential kernel oops when probe fails
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 6, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's brcmfmac Wi-Fi driver. When the probe of an SDIO (Secure Digital Input/Output) brcmfmac device fails, for example due to missing firmware, an invalid bus pointer can be set. This incorrect state can lead to a kernel oops, which is a type of system crash, when the system attempts to free resources during cleanup.
Statement
This vulnerability is rated as having a Moderate impact because exploitation requires specific Broadcom SDIO wireless hardware and results solely in a local denial of service through a kernel crash, without compromising confidentiality or integrity. On standard enterprise deployments, such wireless interfaces are uncommon and typically absent in data center or cloud environments. Consequently, the flaw primarily affects edge or specialized systems where physical SDIO wireless cards fail initialization, restricting the overall attack surface.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-763 · Release of Invalid Pointer or Reference