CVE-2026-53093 - Vulnerability Details

- wifi: brcmfmac: Fix error pointer dereference

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: brcmfmac: Fix error pointer dereference

The function brcmf_chip_add_core() can return an error pointer and is
not checked. Add checks for error pointer.

Detected by Smatch:
drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1010 brcmf_chip_recognition() error:
'core' dereferencing possible ERR_PTR()

drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1013 brcmf_chip_recognition() error:
'core' dereferencing possible ERR_PTR()

drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1016 brcmf_chip_recognition() error:
'core' dereferencing possible ERR_PTR()

drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1019 brcmf_chip_recognition() error:
'core' dereferencing possible ERR_PTR()

drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1022 brcmf_chip_recognition() error:
'core' dereferencing possible ERR_PTR()

[add missing wifi: prefix]

Published: 2026-06-24

Score: 5.5 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`cb7cf7be9eba76f3cd6258906074c72084570c84`	affected	< a3b45090a91e2f0b9715870d8f8d9ca2fdfbc1af
`cb7cf7be9eba76f3cd6258906074c72084570c84`	affected	< 99ef547659178eef6d6ba4738a9d989ce90cf909
`cb7cf7be9eba76f3cd6258906074c72084570c84`	affected	< bd6c906e0c4af6d5d0c49c3c4ee090b4913da17d
`cb7cf7be9eba76f3cd6258906074c72084570c84`	affected	< d3f280be48f1c672cb10e8026c236d0cca60048a
`cb7cf7be9eba76f3cd6258906074c72084570c84`	affected	< 2e0e5a43ed126f896a4ad31ade66c90270601bae
`cb7cf7be9eba76f3cd6258906074c72084570c84`	affected	< cbea71b4480394708f9a6e007a0385acfe5e1ec8
`cb7cf7be9eba76f3cd6258906074c72084570c84`	affected	< 334c68750eee84c2327db1d152be83ff5ad8e20b
`cb7cf7be9eba76f3cd6258906074c72084570c84`	affected	< dd8592fc6007a451c3e4b9025de365e39de8178a

Linux

affected

Version	Status	Constraints
`3.15`	affected	—
`0`	unaffected	< 3.15
`5.10.258`	unaffected	≤ 5.10.*
`5.15.209`	unaffected	≤ 5.15.*
`6.1.175`	unaffected	≤ 6.1.*
`6.6.141`	unaffected	≤ 6.6.*
`6.12.91`	unaffected	≤ 6.12.*
`6.18.33`	unaffected	≤ 6.18.*
`7.0.10`	unaffected	≤ 7.0.*
`7.1`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[cb7cf7be9eba76f3cd6258906074c72084570c84,a3b45090a91e2f0b9715870d8f8d9ca2fdfbc1af)`	affected	code_commit	—
`[cb7cf7be9eba76f3cd6258906074c72084570c84,99ef547659178eef6d6ba4738a9d989ce90cf909)`	affected	code_commit	—
`[cb7cf7be9eba76f3cd6258906074c72084570c84,bd6c906e0c4af6d5d0c49c3c4ee090b4913da17d)`	affected	code_commit	—
`[cb7cf7be9eba76f3cd6258906074c72084570c84,d3f280be48f1c672cb10e8026c236d0cca60048a)`	affected	code_commit	—
`[cb7cf7be9eba76f3cd6258906074c72084570c84,2e0e5a43ed126f896a4ad31ade66c90270601bae)`	affected	code_commit	—
`[cb7cf7be9eba76f3cd6258906074c72084570c84,cbea71b4480394708f9a6e007a0385acfe5e1ec8)`	affected	code_commit	—
`[cb7cf7be9eba76f3cd6258906074c72084570c84,334c68750eee84c2327db1d152be83ff5ad8e20b)`	affected	code_commit	—
`[cb7cf7be9eba76f3cd6258906074c72084570c84,dd8592fc6007a451c3e4b9025de365e39de8178a)`	affected	code_commit	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`3.15`	affected	generic	—
`[0,3.15)`	unaffected	generic	—
`[5.10.258,5.11.0)`	unaffected	semver	—
`[5.15.209,5.16.0)`	unaffected	semver	—
`[6.1.175,6.2.0)`	unaffected	semver	—
`[6.6.141,6.7.0)`	unaffected	semver	—
`[6.12.91,6.13.0)`	unaffected	semver	—
`[6.18.33,6.19.0)`	unaffected	semver	—
`[7.0.10,7.1.0)`	unaffected	semver	—
`[7.1,*)`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00176.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/2e0e5a43ed126f896a4ad31ade66c90270601bae
https://git.kernel.org/stable/c/334c68750eee84c2327db1d152be83ff5ad8e20b
https://git.kernel.org/stable/c/99ef547659178eef6d6ba4738a9d989ce90cf909
https://git.kernel.org/stable/c/a3b45090a91e2f0b9715870d8f8d9ca2fdfbc1af
https://git.kernel.org/stable/c/bd6c906e0c4af6d5d0c49c3c4ee090b4913da17d
https://git.kernel.org/stable/c/cbea71b4480394708f9a6e007a0385acfe5e1ec8
https://git.kernel.org/stable/c/d3f280be48f1c672cb10e8026c236d0cca60048a
https://git.kernel.org/stable/c/dd8592fc6007a451c3e4b9025de365e39de8178a
https://lore.kernel.org/linux-cve-announce/2026062409-CVE-2026-53093-6751@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2026-53093
https://www.cve.org/CVERecord?id=CVE-2026-53093

History

Sat, 27 Jun 2026 00:15:00 +0000

Type	Values Removed	Values Added
References		https://lore.kernel.org/linux-cve-announce/2026062409-CVE-2026-53093-6751@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2026-53093 https://www.cve.org/CVERecord?id=CVE-2026-53093
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Low`

Wed, 24 Jun 2026 20:30:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-476

Wed, 24 Jun 2026 17:15:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix error pointer dereference The function brcmf_chip_add_core() can return an error pointer and is not checked. Add checks for error pointer. Detected by Smatch: drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1010 brcmf_chip_recognition() error: 'core' dereferencing possible ERR_PTR() drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1013 brcmf_chip_recognition() error: 'core' dereferencing possible ERR_PTR() drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1016 brcmf_chip_recognition() error: 'core' dereferencing possible ERR_PTR() drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1019 brcmf_chip_recognition() error: 'core' dereferencing possible ERR_PTR() drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1022 brcmf_chip_recognition() error: 'core' dereferencing possible ERR_PTR() [add missing wifi: prefix]
Title		wifi: brcmfmac: Fix error pointer dereference
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/2e0e5a43ed126f896a4ad31ade66c90270601bae https://git.kernel.org/stable/c/334c68750eee84c2327db1d152be83ff5ad8e20b https://git.kernel.org/stable/c/99ef547659178eef6d6ba4738a9d989ce90cf909 https://git.kernel.org/stable/c/a3b45090a91e2f0b9715870d8f8d9ca2fdfbc1af https://git.kernel.org/stable/c/bd6c906e0c4af6d5d0c49c3c4ee090b4913da17d https://git.kernel.org/stable/c/cbea71b4480394708f9a6e007a0385acfe5e1ec8 https://git.kernel.org/stable/c/d3f280be48f1c672cb10e8026c236d0cca60048a https://git.kernel.org/stable/c/dd8592fc6007a451c3e4b9025de365e39de8178a

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-06-24T16:30:32.053Z

Updated: 2026-06-24T16:30:32.053Z

Reserved: 2026-06-09T07:44:35.384Z

Link: CVE-2026-53093

Vulnrichment

No data.

NVD

No data.

Redhat

Severity : Low

Publid Date: 2026-06-24T00:00:00Z

Links: CVE-2026-53093 - Bugzilla

OpenCVE Enrichment

Updated: 2026-06-27T03:15:04Z

Weaknesses

CWE-476

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object