Vulnerability in brcmfmac: pcie
Summary
GSD-2022-1001902: brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path. Affects Kernel versions >= 82f93cf46d6007ffa003b2d4a2834563b6b84d21, < a88337a06966f2d733ad9a97714b874469133f14. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The brcmfmac package is a kernel module that provides support for Broadcom FullMAC wireless devices. It is responsible for managing the PCIe interface for these devices. The vulnerability in question affects the brcmf_pcie_setup function within the package.
Vulnerability Detail
The brcmf_pcie_setup function in brcmfmac does not properly release firmwares in the error path, leading to a resource leak. This vulnerability was introduced in version v5.4 of the Linux Kernel and fixed in version v5.15.33. An attacker could potentially exploit this vulnerability to cause a denial-of-service condition or execute arbitrary code.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is crucial to update to the fixed version of the Linux Kernel as soon as possible.
Conclusion
The vulnerability in brcmfmac: pcie can be mitigated by updating the Linux Kernel to version v5.15.33 or later. It is crucial to apply this fix to prevent potential denial-of-service or code execution attacks. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
brcmfmac is a kernel module that provides support for Broadcom FullMAC wireless devices. It manages the PCIe interface for these devices.
This vulnerability could potentially lead to a denial-of-service condition or allow an attacker to execute arbitrary code.
To fix this vulnerability, update the Linux Kernel to version v5.15.33 or later.
No, there is no known workaround for this vulnerability. Updating the Linux Kernel is the recommended solution.
For more information, refer to the vulnerability details in the Open Source Vulnerability format or contact info@devnack.com.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
