CVE-2026-68304
Received Received - Intake

wifi: brcmfmac call trace warning in 802.1X-SHA256 mode

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix 802.1X-SHA256 call trace warning Based on wpa_auth as 1x_256 mode, need to set up "use_fwsup" with BRCMF_PROFILE_FWSUP_1X. Or it will happen trace warning when call brcmf_cfg80211_set_pmk(). [ 4481.831101] ------------[ cut here ]------------ [ 4481.831102] WARNING: CPU: 1 PID: 2997 at drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c:7242 brcmf_cfg80211_set_pmk+0x77/0xd0 [brcmfmac] [...] [ 4481.831202] Call Trace: [ 4481.831204]  <TASK> [ 4481.831205]  nl80211_set_pmk+0x183/0x250 [cfg80211] [ 4481.831233]  genl_family_rcv_msg_doit+0xea/0x150 [ 4481.831237]  genl_rcv_msg+0x104/0x240 [ 4481.831239]  ? cfg80211_probe_status+0x2c0/0x2c0 [cfg80211] [ 4481.831257]  ? genl_family_rcv_msg_doit+0x150/0x150 [ 4481.831259]  netlink_rcv_skb+0x4e/0x100 [ 4481.831261]  genl_rcv+0x24/0x40 [ 4481.831262]  netlink_unicast+0x236/0x380 [ 4481.831264]  netlink_sendmsg+0x250/0x4b0 [ 4481.831266]  sock_sendmsg+0x5c/0x70 [ 4481.831269]  ____sys_sendmsg+0x236/0x2b0 [ 4481.831271]  ? copy_msghdr_from_user+0x6d/0xa0 [ 4481.831272]  ___sys_sendmsg+0x86/0xd0 [ 4481.831274]  ? avc_has_perm+0x8c/0x1a0 [ 4481.831276]  ? preempt_count_add+0x6a/0xa0 [ 4481.831279]  ? sock_has_perm+0x82/0xa0 [ 4481.831280]  __sys_sendmsg+0x57/0xa0 [ 4481.831282]  do_syscall_64+0x38/0x90 [ 4481.831284]  entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 4481.831286] RIP: 0033:0x7fd270d369b4

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-68304
EUVD
EUVD-2026-55405

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
broadcom brcmfmac *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel's brcmfmac Wi-Fi driver causes a call trace warning when using 802.1X-SHA256 authentication. It occurs because the 'use_fwsup' setting is not properly configured with BRCMF_PROFILE_FWSUP_1X, leading to a warning during the brcmf_cfg80211_set_pmk() function call.

Detection Guidance

This vulnerability manifests as a call trace warning in the Linux kernel logs when the brcmfmac driver is used with 802.1X-SHA256 authentication. Check kernel logs for warnings from brcmfmac_cfg80211.c around set_pmk function. Commands: dmesg | grep -i brcmfmac, journalctl -k | grep -i brcmfmac, or check /var/log/kern.log for trace warnings.

Impact Analysis

This vulnerability may cause system warnings or errors during Wi-Fi authentication processes using 802.1X-SHA256. While it does not directly compromise security, it could lead to operational issues or unexpected behavior in Wi-Fi connectivity for affected systems.

Mitigation Strategies

Update the Linux kernel to a patched version that includes the fix for this issue. If updating is not immediately possible, disable 802.1X-SHA256 authentication on affected systems or apply the kernel patch manually if available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68304. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart