CVE-2026-98350
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cyw: pass PMKID to firmware if present Zero out auth_status on initialization. Otherwise, garbage will leak from the stack to the firmware (when ssid is less than 32 bytes and/or when params->pmkid is set). Then, pass the params->pmkid to the firmware (without it, the firmware caches a garbage PMKID on successful authentication and denies a subsequent association request that includes the PMKID).
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedOct 6, 2026
First seenOct 6, 2026
How to fix
Update
- Linux Linuxc2cf589c7d546557ed60c43f2ec014279265dfbf, 6fba6233e9ca7718661e53555a3961c58772c21a, e2de8d5eb2984416affdd9559e55f37c7f1bbf47 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 66f909308a7c05082919ff214a0bbe2a76aa0283 ≤ v < c2cf589c7d546557ed60c43f2ec014279265dfbf, 66f909308a7c05082919ff214a0bbe2a76aa0283 ≤ v < 6fba6233e9ca7718661e53555a3961c58772c21a, 66f909308a7c05082919ff214a0bbe2a76aa0283 ≤ v < e2de8d5eb2984416affdd9559e55f37c7f1bbf47, 6.16 | c2cf589c7d546557ed60c43f2ec014279265dfbf, 6fba6233e9ca7718661e53555a3961c58772c21a, e2de8d5eb2984416affdd9559e55f37c7f1bbf47 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.