In the Linux kernel, the following vulnerability has been resolved:
wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion
wpa_supplicant 2.11 sends since 1efdba5fdc2c ("Handle PMKSA flush in the driver for SAE/OWE offload cases") SSID based PMKSA del commands. brcmfmac is not prepared and tries to dereference the NULL bssid and pmkid pointers in cfg80211_pmksa. PMKID_V3 operations support SSID based updates so copy the SSID.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 11, 2024 |
| Suse | — | Upgrade dtb-sprdUpgrade dtb-xilinxUpgrade kernel-64kb-develUpgrade dlm-kmp-rtUpgrade dtb-qcomUpgrade dlm-kmp-azureUpgrade dtb-rockchipUpgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-rtUpgrade ocfs2-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-sourceUpgrade kselftests-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-obs-buildUpgrade kernel-kvmsmallUpgrade dtb-nvidiaUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade dtb-armUpgrade dtb-caviumUpgrade dtb-mediatekUpgrade kernel-rt-extraUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kernel-default-optionalUpgrade kernel-rtUpgrade kernel-develUpgrade dtb-exynosUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-azureUpgrade dtb-apmUpgrade kernel-azure-develUpgrade kernel-default-base-rebuildUpgrade kernel-rt-develUpgrade kernel-64kb-extraUpgrade kernel-devel-azureUpgrade dtb-amlogicUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade dtb-appleUpgrade reiserfs-kmp-64kbUpgrade dtb-amdUpgrade dtb-alteraUpgrade dlm-kmp-defaultUpgrade kernel-azureUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-develUpgrade kernel-azure-optionalUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade kernel-zfcpdumpUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatch-develUpgrade kernel-default-develUpgrade dtb-socionextUpgrade dtb-freescaleUpgrade kernel-rt-vdsoUpgrade kernel-64kbUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-debug-develUpgrade kernel-rt_debugUpgrade kselftests-kmp-rtUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-source-rtUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade ocfs2-kmp-rtUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade kernel-azure-vdsoUpgrade kernel-source-azureUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-symsUpgrade kernel-default-baseUpgrade kernel-debug-livepatch-devel | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-genericUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-oem-22.04dUpgrade linux-image-ibmUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-azure | Dec 13, 2024 | Sep 11, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub