In the Linux kernel, the following vulnerability has been resolved:
wifi: brcmfmac: Check the return value of of_property_read_string_index()
Somewhen between 6.10 and 6.11 the driver started to crash on my MacBookPro14,3. The property doesn't exist and 'tmp' remains uninitialized, so we pass a random pointer to devm_kstrdup().
The crash I am getting looks like this:
BUG: unable to handle page fault for address: 00007f033c669379 PF: supervisor read access in kernel mode PF: error_code(0x0001) - permissions violation PGD 8000000101341067 P4D 8000000101341067 PUD 101340067 PMD 1013bb067 PTE 800000010aee9025 Oops: Oops: 0001 [#1] SMP PTI CPU: 4 UID: 0 PID: 827 Comm: (udev-worker) Not tainted 6.11.8-gentoo #1 Hardware name: Apple Inc. MacBookPro14,3/Mac-551B86E5744E2388, BIOS 529.140.2.0.0 06/23/2024 RIP: 0010:strlen+0x4/0x30 Code: f7 75 ec 31 c0 c3 cc cc cc cc 48 89 f8 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <80> 3f 00 74 14 48 89 f8 48 83 c0 01 80 38 00 75 f7 48 29 f8 c3 cc RSP: 0018:ffffb4aac0683ad8 EFLAGS: 00010202 RAX: 00000000ffffffea RBX: 00007f033c669379 RCX: 0000000000000001 RDX: 0000000000000cc0 RSI: 00007f033c669379 RDI: 00007f033c669379 RBP: 00000000ffffffea R08: 0000000000000000 R09: 00000000c0ba916a R10: ffffffffffffffff R11: ffffffffb61ea260 R12: ffff91f7815b50c8 R13: 0000000000000cc0 R14: ffff91fafefffe30 R15: ffffb4aac0683b30 FS: 00007f033ccbe8c0(0000) GS:ffff91faeed00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f033c669379 CR3: 0000000107b1e004 CR4: 00000000003706f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> ? __die+0x23/0x70 ? page_fault_oops+0x149/0x4c0 ? raw_spin_rq_lock_nested+0xe/0x20 ? sched_balance_newidle+0x22b/0x3c0 ? update_load_avg+0x78/0x770 ? exc_page_fault+0x6f/0x150 ? asm_exc_page_fault+0x26/0x30 ? __pfx_pci_conf1_write+0x10/0x10 ? strlen+0x4/0x30 devm_kstrdup+0x25/0x70 brcmf_of_probe+0x273/0x350 [brcmfmac]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Mar 17, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libs | Aug 13, 2025 | Jul 18, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perf | Jul 21, 2025 | Feb 27, 2025 |
| Oracle_linux | — | Upgrade kernel | Dec 3, 2025 | Feb 27, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 9, 2025 | Feb 27, 2025 |
| Rocky_linux | — | Upgrade kernel-uki-virt-addonsUpgrade kernel-debug-modules-extraUpgrade kernel-develUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-debugUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-modulesUpgrade kernel-modules-extra-matchedUpgrade kernelUpgrade kernel-zfcpdump-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdumpUpgrade rvUpgrade kernel-toolsUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debuginfo-common-s390xUpgrade kernel-zfcpdump-modules-coreUpgrade libperfUpgrade kernel-zfcpdump-develUpgrade rtlaUpgrade perf-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-modulesUpgrade kernel-debuginfoUpgrade kernel-debug-devel-matchedUpgrade libperf-debuginfoUpgrade kernel-uki-virtUpgrade python3-perfUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-coreUpgrade kernel-devel-matched | Feb 5, 2026 | Nov 27, 2025 |
| Suse | — | Upgrade dtb-hisiliconUpgrade kernel-64kb-develUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade kernel-azure-optionalUpgrade kernel-syms-azureUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade gfs2-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-source-rtUpgrade kernel-azure-extraUpgrade kernel-obs-qaUpgrade kernel-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amazonUpgrade kernel-macrosUpgrade reiserfs-kmp-64kbUpgrade dtb-alteraUpgrade dtb-broadcomUpgrade kernel-develUpgrade kernel-rt-optionalUpgrade dtb-xilinxUpgrade cluster-md-kmp-azureUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade dtb-lgUpgrade gfs2-kmp-rtUpgrade dtb-amlogicUpgrade dtb-caviumUpgrade kernel-sourceUpgrade dtb-apmUpgrade dtb-qcomUpgrade kernel-rt_debug-develUpgrade kernel-default-develUpgrade cluster-md-kmp-rtUpgrade kernel-default-livepatchUpgrade dtb-freescaleUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade kernel-default-vdsoUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-azureUpgrade dtb-exynosUpgrade kernel-obs-buildUpgrade kernel-rt-develUpgrade dtb-renesasUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-debug-vdsoUpgrade dtb-socionextUpgrade dtb-marvellUpgrade kernel-rt-livepatch-develUpgrade kernel-default-baseUpgrade kernel-debugUpgrade kernel-azure-vdsoUpgrade dtb-sprdUpgrade kernel-source-vanillaUpgrade dtb-mediatekUpgrade kernel-rt-vdsoUpgrade dtb-rockchipUpgrade reiserfs-kmp-rtUpgrade dtb-amdUpgrade kernel-64kb-extraUpgrade kernel-rt_debugUpgrade reiserfs-kmp-defaultUpgrade dtb-armUpgrade kernel-devel-rtUpgrade dtb-appleUpgrade kernel-syms-rtUpgrade kernel-rt-extraUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade kernel-azureUpgrade dtb-allwinnerUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-debug-develUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-default | Apr 9, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-6.8Upgrade linux-image-nvidiaUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-2026-raspi-realtimeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gke-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-oracle-6.8Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1031-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1031-nvidiaUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-azure-nvidiaUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1033-gcp-64kUpgrade linux-image-6.8.0-1015-gkeopUpgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-generic-64kUpgrade linux-image-gcp-64kUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-gkeopUpgrade linux-image-azureUpgrade linux-image-6.8.0-64-lowlatency-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-64-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1033-gcpUpgrade linux-image-generic-64k-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-6.8.0-1031-nvidia-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1031-raspiUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1029-ibmUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.11.0-1015-azureUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1031-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1029-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1029-oracle-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1032-aws-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-gcpUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-64-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1031-nvidia-64kUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-6.8.0-1032-awsUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.1-1025-realtimeUpgrade linux-image-azure-fde-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-realtimeUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1028-gkeUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-virtual | May 21, 2025 | Feb 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub