CVE-2026-80949wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control() The memory allocated for buf is not freed in some of the error paths in brcmf_sdio_read_control(). Fix that by adding vfree() calls. [arend: rework as suggested by Johannes]
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 14, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from dd43a01c5cdb811adeb09e6a2d2788f8aa0d0969 before b1d0a90a844abccdfed9fe141b5d0d654a821485; from dd43a01c5cdb811adeb09e6a2d2788f8aa0d0969 before 86b57fa3172e287bc083113507a965e6d9a46a45; from dd43a01c5cdb811adeb09e6a2d2788f8aa0d0969 before a732c4f36a4cd79f3702391f88ebb56f2e43b0ee; from dd43a01c5cdb811adeb09e6a2d2788f8aa0d0969 before 7704f6ba2a8c492b07a3eaa1e311b4b30d389246; from dd43a01c5cdb811adeb09e6a2d2788f8aa0d0969 before fdb880a7d575efe8b5c7b5b819b96d9251a3937f; from dd43a01c5cdb811adeb09e6a2d2788f8aa0d0969 before 261d7c7610b4b2f476382c88a2d1ae0cc5e07add; from dd43a01c5cdb811adeb09e6a2d2788f8aa0d0969 before ba04715ee672c336272be3ceb43bda9ffc33eb75; from dd43a01c5cdb811adeb09e6a2d2788f8aa0d0969 before 0d10db8e94fcb23a799789aaa696b4d8f937e207 | CNA record |
References
- https://git.kernel.org/stable/c/b1d0a90a844abccdfed9fe141b5d0d654a821485
- https://git.kernel.org/stable/c/86b57fa3172e287bc083113507a965e6d9a46a45
- https://git.kernel.org/stable/c/a732c4f36a4cd79f3702391f88ebb56f2e43b0ee
- https://git.kernel.org/stable/c/7704f6ba2a8c492b07a3eaa1e311b4b30d389246
- https://git.kernel.org/stable/c/fdb880a7d575efe8b5c7b5b819b96d9251a3937f
- https://git.kernel.org/stable/c/261d7c7610b4b2f476382c88a2d1ae0cc5e07add
- https://git.kernel.org/stable/c/ba04715ee672c336272be3ceb43bda9ffc33eb75
- https://git.kernel.org/stable/c/0d10db8e94fcb23a799789aaa696b4d8f937e207
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.