CVE-2026-68304

A flaw was found in the Linux kernel's brcmfmac Wi-Fi driver. When the driver operates in 802.1X-SHA256 authentication mode, it fails to correctly configure a firmware-related setting. This misconfiguration can trigger a kernel call trace warning during the execution of the brcmf_cfg80211_set_pmk() function, potentially leading to system instability or a denial of service.

This issue affects Broadcom FullMAC (brcmfmac) Wi-Fi in 802.1X-SHA256 mode. Missing BRCMF_PROFILE_FWSUP_1X setup causes warnings and misbehavior in brcmf_cfg80211_set_pmk(). Systems without brcmfmac hardware are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the brcmfmac module from loading. See https://access.redhat.com/solutions/41278 for instructions.