-

CVE-2026-68304

wifi: brcmfmac: fix 802.1X-SHA256 call trace warning

In the Linux kernel, the following vulnerability has been resolved:

wifi: brcmfmac: fix 802.1X-SHA256 call trace warning

Based on wpa_auth as 1x_256 mode, need to set up
"use_fwsup" with BRCMF_PROFILE_FWSUP_1X.
Or it will happen trace warning when call brcmf_cfg80211_set_pmk().

[ 4481.831101] ------------[ cut here ]------------
[ 4481.831102] WARNING: CPU: 1 PID: 2997 at
drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c:7242 brcmf_cfg80211_set_pmk+0x77/0xd0 [brcmfmac]
[...]
[ 4481.831202] Call Trace:
[ 4481.831204]  <TASK>
[ 4481.831205]  nl80211_set_pmk+0x183/0x250 [cfg80211]
[ 4481.831233]  genl_family_rcv_msg_doit+0xea/0x150
[ 4481.831237]  genl_rcv_msg+0x104/0x240
[ 4481.831239]  ? cfg80211_probe_status+0x2c0/0x2c0 [cfg80211]
[ 4481.831257]  ? genl_family_rcv_msg_doit+0x150/0x150
[ 4481.831259]  netlink_rcv_skb+0x4e/0x100
[ 4481.831261]  genl_rcv+0x24/0x40
[ 4481.831262]  netlink_unicast+0x236/0x380
[ 4481.831264]  netlink_sendmsg+0x250/0x4b0
[ 4481.831266]  sock_sendmsg+0x5c/0x70
[ 4481.831269]  ____sys_sendmsg+0x236/0x2b0
[ 4481.831271]  ? copy_msghdr_from_user+0x6d/0xa0
[ 4481.831272]  ___sys_sendmsg+0x86/0xd0
[ 4481.831274]  ? avc_has_perm+0x8c/0x1a0
[ 4481.831276]  ? preempt_count_add+0x6a/0xa0
[ 4481.831279]  ? sock_has_perm+0x82/0xa0
[ 4481.831280]  __sys_sendmsg+0x57/0xa0
[ 4481.831282]  do_syscall_64+0x38/0x90
[ 4481.831284]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 4481.831286] RIP: 0033:0x7fd270d369b4
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 2526ff21aa77c205f72e8263335f20b7d7e636fc
Version < fe27cc1feecde0e6a0a9a04b7ad3262ed5f99252
Status affected
Version 2526ff21aa77c205f72e8263335f20b7d7e636fc
Version < 47989a233df369c2c2263ab0a5cbd8c8dad253a5
Status affected
Version 2526ff21aa77c205f72e8263335f20b7d7e636fc
Version < d0395840e3266397de94ecd3c91e1c188c7667c6
Status affected
Version 2526ff21aa77c205f72e8263335f20b7d7e636fc
Version < 137e4710da626290495b174e2eb1d5e889a4b165
Status affected
Version 2526ff21aa77c205f72e8263335f20b7d7e636fc
Version < d3ac5b35ec85c41ccf8ec524d47b520e72edaca1
Status affected
Version 2526ff21aa77c205f72e8263335f20b7d7e636fc
Version < 00ebbf030d8c4a1cb89cbbae15e28332373649db
Status affected
Version 2526ff21aa77c205f72e8263335f20b7d7e636fc
Version < bd4fac033bb95fcad898cf6734e869991b2561cb
Status affected
Version 2526ff21aa77c205f72e8263335f20b7d7e636fc
Version < 7cb34f6c4fe8a68af621d870abe63bfca2275dd6
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.13
Status affected
Version 0
Version < 4.13
Status unaffected
Version <= 5.10.*
Version 5.10.265
Status unaffected
Version <= 5.15.*
Version 5.15.216
Status unaffected
Version <= 6.1.*
Version 6.1.183
Status unaffected
Version <= 6.6.*
Version 6.6.148
Status unaffected
Version <= 6.12.*
Version 6.12.101
Status unaffected
Version <= 6.18.*
Version 6.18.42
Status unaffected
Version <= 7.1.*
Version 7.1.6
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.116
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/137e4710da626290495b174e2eb1d5e889a4b165
https://git.kernel.org/stable/c/d3ac5b35ec85c41ccf8ec524d47b520e72edaca1
https://git.kernel.org/stable/c/00ebbf030d8c4a1cb89cbbae15e28332373649db
https://git.kernel.org/stable/c/bd4fac033bb95fcad898cf6734e869991b2561cb
https://git.kernel.org/stable/c/7cb34f6c4fe8a68af621d870abe63bfca2275dd6
https://git.kernel.org/stable/c/47989a233df369c2c2263ab0a5cbd8c8dad253a5
https://git.kernel.org/stable/c/d0395840e3266397de94ecd3c91e1c188c7667c6
https://git.kernel.org/stable/c/fe27cc1feecde0e6a0a9a04b7ad3262ed5f99252