CVE-2025-37990
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() The function brcmf_usb_dl_writeimage() calls the function brcmf_usb_dl_cmd() but dose not check its return value. The 'state.state' and the 'state.bytes' are uninitialized if the function brcmf_usb_dl_cmd() fails. It is dangerous to use uninitialized variables in the conditions. Add error handling for brcmf_usb_dl_cmd() to jump to error handling path if the brcmf_usb_dl_cmd() fails and the 'state.state' and the 'state.bytes' are uninitialized. Improve the error message to report more detailed error information.
How to fix
- linux linux_kernel5.4.294, 5.10.238, 5.15.182, 6.1.138, 6.6.90, 6.12.28, 6.14.6 or later
- git.kernel.org/stable/c/08424a0922fb9e32a19b09d852ee87fb6c497538
- git.kernel.org/stable/c/508be7c001437bacad7b9a43f08a723887bcd1ea
- git.kernel.org/stable/c/524b70441baba453b193c418e3142bd31059cc1f
- git.kernel.org/stable/c/62a4f2955d9a1745bdb410bf83fb16666d8865d6
- git.kernel.org/stable/c/8e089e7b585d95122c8122d732d1d5ef8f879396
- git.kernel.org/stable/c/972bf75e53f778c78039c5d139dd47443a6d66a1
- git.kernel.org/stable/c/bdb435ef9815b1ae28eefffa01c6959d0fcf1fa7
- git.kernel.org/stable/c/fa9b9f02212574ee1867fbefb0a675362a71b31d
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 3.4 ≤ v < 5.4.294, 5.5 ≤ v < 5.10.238, 5.11 ≤ v < 5.15.182, 5.16 ≤ v < 6.1.138, 6.2 ≤ v < 6.6.90, 6.7 ≤ v < 6.12.28, 6.13 ≤ v < 6.14.6, 6.15 | 5.4.294, 5.10.238, 5.15.182, 6.1.138, 6.6.90, 6.12.28, 6.14.6 |
| debian debian_linux | 11.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.