CVE-2026-98350

A flaw was found in the Linux kernel's Broadcom FullMAC (brcmfmac) wireless driver. During external Wi-Fi authentication, an uninitialized data structure can leak sensitive kernel stack memory directly to the device firmware when processing short network names or key identifiers. A local user or an untrusted wireless network could trigger this condition during authentication, leading to information disclosure or causing subsequent connection attempts to fail, resulting in a Denial of Service (DoS).

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation is limited to systems equipped with physical Broadcom FullMAC wireless network hardware. Most enterprise server and container deployments do not utilize Wi-Fi hardware, leaving the driver unused under standard configurations. Triggering the flaw requires local privileges to initiate wireless authentication with specific parameters, constraining the blast radius to information leakage to device firmware and localized denial of service for wireless connectivity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.