In the Linux kernel, the following vulnerability has been resolved:
wifi: brcmfmac: Check the return value of of_property_read_string_index()
Somewhen between 6.10 and 6.11 the driver started to crash on my MacBookPro14,3. The property doesn't exist and 'tmp' remains uninitialized, so we pass a random pointer to devm_kstrdup().
The crash I am getting looks like this:
BUG: unable to handle page fault for address: 00007f033c669379 PF: supervisor read access in kernel mode PF: error_code(0x0001) - permissions violation PGD 8000000101341067 P4D 8000000101341067 PUD 101340067 PMD 1013bb067 PTE 800000010aee9025 Oops: Oops: 0001 [#1] SMP PTI CPU: 4 UID: 0 PID: 827 Comm: (udev-worker) Not tainted 6.11.8-gentoo #1 Hardware name: Apple Inc. MacBookPro14,3/Mac-551B86E5744E2388, BIOS 529.140.2.0.0 06/23/2024 RIP: 0010:strlen+0x4/0x30 Code: f7 75 ec 31 c0 c3 cc cc cc cc 48 89 f8 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <80> 3f 00 74 14 48 89 f8 48 83 c0 01 80 38 00 75 f7 48 29 f8 c3 cc RSP: 0018:ffffb4aac0683ad8 EFLAGS: 00010202 RAX: 00000000ffffffea RBX: 00007f033c669379 RCX: 0000000000000001 RDX: 0000000000000cc0 RSI: 00007f033c669379 RDI: 00007f033c669379 RBP: 00000000ffffffea R08: 0000000000000000 R09: 00000000c0ba916a R10: ffffffffffffffff R11: ffffffffb61ea260 R12: ffff91f7815b50c8 R13: 0000000000000cc0 R14: ffff91fafefffe30 R15: ffffb4aac0683b30 FS: 00007f033ccbe8c0(0000) GS:ffff91faeed00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f033c669379 CR3: 0000000107b1e004 CR4: 00000000003706f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> ? __die+0x23/0x70 ? page_fault_oops+0x149/0x4c0 ? raw_spin_rq_lock_nested+0xe/0x20 ? sched_balance_newidle+0x22b/0x3c0 ? update_load_avg+0x78/0x770 ? exc_page_fault+0x6f/0x150 ? asm_exc_page_fault+0x26/0x30 ? __pfx_pci_conf1_write+0x10/0x10 ? strlen+0x4/0x30 devm_kstrdup+0x25/0x70 brcmf_of_probe+0x273/0x350 [brcmfmac]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Mar 17, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel | Aug 13, 2025 | Jul 18, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelists | Jul 21, 2025 | Feb 27, 2025 |
| Oracle_linux | — | Upgrade kernel | Dec 3, 2025 | Feb 27, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 9, 2025 | Feb 27, 2025 |
| Rocky_linux | — | Upgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-modules-extra-matchedUpgrade kernel-rt-develUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade python3-perf-debuginfoUpgrade rvUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdumpUpgrade kernelUpgrade kernel-debug-modules-extraUpgrade kernel-debugUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-modulesUpgrade kernel-rtUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-devel-matchedUpgrade python3-perfUpgrade perfUpgrade libperf-debuginfoUpgrade kernel-uki-virtUpgrade kernel-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-develUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-modulesUpgrade libperfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-develUpgrade rtlaUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-modules-core | Feb 5, 2026 | Nov 27, 2025 |
| Suse | — | Upgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-debugUpgrade kernel-default-baseUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-rt-extraUpgrade dtb-nvidiaUpgrade kernel-debug-develUpgrade kselftests-kmp-rtUpgrade dtb-appleUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-armUpgrade dlm-kmp-defaultUpgrade dtb-renesasUpgrade dlm-kmp-azureUpgrade kernel-devel-rtUpgrade dtb-amdUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-source-vanillaUpgrade dtb-mediatekUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-docsUpgrade kernel-azureUpgrade kernel-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-rt-develUpgrade dtb-marvellUpgrade gfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade dtb-socionextUpgrade dtb-sprdUpgrade kernel-default-manUpgrade kernel-azure-vdsoUpgrade dlm-kmp-rtUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-caviumUpgrade kernel-64kbUpgrade kernel-default-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatchUpgrade dtb-apmUpgrade cluster-md-kmp-rtUpgrade dtb-freescaleUpgrade gfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-docs-htmlUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-source-rtUpgrade kernel-azure-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-azure-develUpgrade kernel-64kb-develUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-default-extraUpgrade dtb-hisiliconUpgrade reiserfs-kmp-64kbUpgrade kernel-macrosUpgrade dtb-alteraUpgrade cluster-md-kmp-azureUpgrade kernel-develUpgrade dtb-xilinxUpgrade dtb-amazonUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade kernel-rtUpgrade kernel-kvmsmall-vdsoUpgrade dtb-qcomUpgrade kernel-rt-optionalUpgrade dtb-lgUpgrade dtb-amlogicUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade gfs2-kmp-64kb | Apr 9, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1033-gcp-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-lowlatency-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-64-lowlatencyUpgrade linux-image-virtual-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-6.8.0-1031-raspiUpgrade linux-image-gcp-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-ibmUpgrade linux-image-oem-22.04cUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-gkeopUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-azureUpgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-6.8.0-2026-raspi-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.11.0-1022-oemUpgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-6.8.0-1031-nvidia-lowlatencyUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1033-gcpUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-gke-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1031-oemUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-64-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1031-nvidiaUpgrade linux-image-6.8.0-1015-gkeopUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-oracle-6.8Upgrade linux-image-raspiUpgrade linux-image-virtualUpgrade linux-image-oem-24.04bUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1028-gkeUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-6.8.0-1032-aws-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-64-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1029-oracle-64kUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-azure-fde-6.8Upgrade linux-image-awsUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1032-awsUpgrade linux-image-6.8.0-1031-nvidia-64kUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.1-1025-realtimeUpgrade linux-image-gcp-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1029-ibmUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1029-oracleUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1031-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1015-azure | May 21, 2025 | Feb 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub