In the Linux kernel, the following vulnerability has been resolved:
wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion
wpa_supplicant 2.11 sends since 1efdba5fdc2c ("Handle PMKSA flush in the driver for SAE/OWE offload cases") SSID based PMKSA del commands. brcmfmac is not prepared and tries to dereference the NULL bssid and pmkid pointers in cfg80211_pmksa. PMKID_V3 operations support SSID based updates so copy the SSID.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 11, 2024 |
| Suse | — | Upgrade dtb-qcomUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-azure-develUpgrade kernel-obs-buildUpgrade dtb-armUpgrade kernel-develUpgrade kselftests-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade kernel-rt-develUpgrade kernel-obs-qaUpgrade cluster-md-kmp-rtUpgrade kernel-rtUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade kernel-default-vdsoUpgrade dtb-mediatekUpgrade kernel-defaultUpgrade dtb-exynosUpgrade kernel-default-optionalUpgrade dtb-nvidiaUpgrade kernel-default-base-rebuildUpgrade kernel-rt-extraUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade dtb-apmUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade reiserfs-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-devel-rtUpgrade dtb-caviumUpgrade dtb-sprdUpgrade dtb-xilinxUpgrade kernel-64kb-develUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-docs-htmlUpgrade dtb-renesasUpgrade kernel-rt-optionalUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-azure-vdsoUpgrade dtb-marvellUpgrade dtb-amazonUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-vanillaUpgrade kernel-default-baseUpgrade kernel-debug-livepatch-develUpgrade kernel-debugUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade dtb-appleUpgrade dtb-amlogicUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade dtb-broadcomUpgrade kernel-64kb-livepatch-develUpgrade kernel-azureUpgrade kernel-64kbUpgrade dtb-socionextUpgrade dtb-freescaleUpgrade kernel-rt-vdsoUpgrade kernel-default-develUpgrade reiserfs-kmp-rtUpgrade kernel-source-rtUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade dtb-alteraUpgrade dtb-hisiliconUpgrade kernel-zfcpdump | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-ibmUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-gcpUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-gkeopUpgrade linux-image-genericUpgrade linux-image-oracle-64kUpgrade linux-image-ibm-classic | Dec 13, 2024 | Sep 11, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub