CVE-2026-80949

Received Received - Intake

Memory Leak in Linux Kernel wifi: brcmfmac Driver

Publication date: 2026-09-11

Last updated on: 2026-09-11

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control() The memory allocated for buf is not freed in some of the error paths in brcmf_sdio_read_control(). Fix that by adding vfree() calls. [arend: rework as suggested by Johannes]

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-11

Last Modified

2026-09-11

Generated

2026-09-12

AI Q&A

2026-09-12

EPSS Evaluated

N/A

NVD

CVE-2026-80949

EUVD

EUVD-2026-76272

Affected Vendors & Products

Vendor	Product	Version / Range
brcmfmac	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a memory leak vulnerability in the Linux kernel's wifi driver brcmfmac. The function brcmf_sdio_read_control() allocates memory for a buffer but fails to free it in certain error scenarios. The fix adds vfree() calls to properly release the allocated memory.

Detection Guidance

This vulnerability involves a memory leak in the Linux kernel's brcmfmac WiFi driver. Detection requires checking for memory leaks in the kernel logs or using tools like 'vmstat' or 'sar' to monitor memory usage. Specific commands include 'dmesg | grep brcmfmac' to check driver logs and 'cat /proc/meminfo' to monitor memory consumption.

Impact Analysis

The memory leak could gradually consume system memory over time, potentially leading to performance degradation or system instability if the function is called repeatedly in error conditions. This mainly affects systems using the brcmfmac wifi driver.

Mitigation Strategies

Apply the latest Linux kernel update that includes the fix for CVE-2026-80949. If updating is not immediately possible, consider disabling the affected brcmfmac driver if it is not critical for your system.

Hi! I’m here to help you understand CVE-2026-80949. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70