CVE-2026-98350

Received Received - Intake

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-19

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cyw: pass PMKID to firmware if present Zero out auth_status on initialization. Otherwise, garbage will leak from the stack to the firmware (when ssid is less than 32 bytes and/or when params->pmkid is set). Then, pass the params->pmkid to the firmware (without it, the firmware caches a garbage PMKID on successful authentication and denies a subsequent association request that includes the PMKID).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-19

Generated

2026-10-19

AI Q&A

2026-10-06

EPSS Evaluated

2026-10-18

NVD

CVE-2026-98350

EUVD

EUVD-2026-93335

Affected Vendors & Products

Vendor	Product	Version / Range
Linux	Linux	66f909308a7c05082919ff214a0bbe2a76aa0283
Linux	Linux	66f909308a7c05082919ff214a0bbe2a76aa0283
Linux	Linux	66f909308a7c05082919ff214a0bbe2a76aa0283
Linux	Linux	6.16

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel's brcmfmac Wi-Fi driver involves memory corruption where uninitialized data (garbage) from the stack could leak to firmware. Specifically, the auth_status variable is not zeroed out during initialization, causing potential exposure when SSID is short or PMKID is set. The driver also fails to properly pass the PMKID to firmware, leading to incorrect caching of invalid PMKID data.

Detection Guidance

This vulnerability is specific to the Linux kernel's brcmfmac WiFi driver and involves memory corruption during authentication. Detection requires checking kernel logs for WiFi authentication errors or examining the driver's behavior during connection attempts.

Impact Analysis

An attacker could exploit this to cause denial of service by preventing legitimate Wi-Fi connections. If the firmware caches a corrupted PMKID, even valid devices may fail to authenticate. This could disrupt network access or enable man-in-the-middle attacks during Wi-Fi authentication.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR or HIPAA as it pertains to a Linux kernel WiFi driver issue. The flaw involves improper handling of PMKID data in the brcmfmac driver, which could lead to authentication problems but does not involve data exposure or privacy violations typically addressed by these regulations.

Mitigation Strategies

Update your Linux kernel to the patched version that includes the fix for this issue. Monitor vendor advisories for driver updates if you use Broadcom WiFi hardware.

Hi! I’m here to help you understand CVE-2026-98350. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70