Vulnerability in brcmfmac Kernel Package: Release Firmwares in the brcmf_pcie_setup Error Path
Summary
GSD-2022-1002268: brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path. Affects Kernel versions >= 82f93cf46d6007ffa003b2d4a2834563b6b84d21, < d0ab87f8dcdfe72dc1d763be3392c1fc51a1ace2. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The brcmfmac package is a kernel module that provides support for Broadcom FullMAC wireless devices. It is responsible for managing the communication between the device and the operating system. The brcmf_pcie_setup function is a part of this package and is used to initialize the PCIe interface for Broadcom wireless devices. However, a vulnerability has been discovered in this function that can lead to a resource leak if an error occurs during the setup process.
Vulnerability Detail
The vulnerability in the brcmfmac package occurs when an error is encountered during the brcmf_pcie_setup function. In such cases, the function fails to release the firmware resources properly, resulting in a resource leak. An attacker could potentially exploit this vulnerability to exhaust system resources, leading to a denial of service (DoS) condition. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The brcmfmac package in the Linux Kernel has a vulnerability in the brcmf_pcie_setup function that can lead to a resource leak. This vulnerability has been fixed in Linux Kernel version v5.4.189. Users are advised to update their kernel to this version or a later version that includes the fix. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The brcmfmac package is a kernel module that provides support for Broadcom FullMAC wireless devices.
The brcmf_pcie_setup function is a part of the brcmfmac package and is used to initialize the PCIe interface for Broadcom wireless devices.
The impact of this vulnerability is a potential denial of service (DoS) condition due to resource exhaustion.
No, the impact and attack plausibility of this vulnerability have not been proven yet.
To fix this vulnerability, users should update their kernel to version v5.4.189 or a later version that includes the fix.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
