CVE-2025-37990None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() The function brcmf_usb_dl_writeimage() calls the function brcmf_usb_dl_cmd() but dose not check…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Nov 5.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
In the Linux kernel, the following vulnerability has been resolved:
wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()
The function brcmf_usb_dl_writeimage() calls the function brcmf_usb_dl_cmd() but dose not check its return value. The 'state.state' and the 'state.bytes' are uninitialized if the function brcmf_usb_dl_cmd() fails. It is dangerous to use uninitialized variables in the conditions.
Add error handling for brcmf_usb_dl_cmd() to jump to error handling path if the brcmf_usb_dl_cmd() fails and the 'state.state' and the 'state.bytes' are uninitialized.
Improve the error message to report more detailed error information.
Linux >= 71bb244ba2fd5390eefe4ee9054abdb3f8b05922 < 972bf75e53f778c78039c5d139dd47443a6d66a1Linux >= 71bb244ba2fd5390eefe4ee9054abdb3f8b05922 < 62a4f2955d9a1745bdb410bf83fb16666d8865d6Linux >= 71bb244ba2fd5390eefe4ee9054abdb3f8b05922 < 508be7c001437bacad7b9a43f08a723887bcd1eaLinux >= 71bb244ba2fd5390eefe4ee9054abdb3f8b05922 < 524b70441baba453b193c418e3142bd31059cc1fLinux >= 71bb244ba2fd5390eefe4ee9054abdb3f8b05922 < 08424a0922fb9e32a19b09d852ee87fb6c497538Linux >= 71bb244ba2fd5390eefe4ee9054abdb3f8b05922 < bdb435ef9815b1ae28eefffa01c6959d0fcf1fa7Linux >= 71bb244ba2fd5390eefe4ee9054abdb3f8b05922 < fa9b9f02212574ee1867fbefb0a675362a71b31dLinux >= 71bb244ba2fd5390eefe4ee9054abdb3f8b05922 < 8e089e7b585d95122c8122d732d1d5ef8f879396Linux 3.4Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99284Nonenet: skbuff: propagate shared-frag marker in skb_zerocopy()
CVE-2026-99283Nonenetfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
CVE-2026-99272Nonesmb: client: validate the data area in SMB2_read()
CVE-2026-99271NoneALSA: line6: Clear prev_fbuf on capture buffer release
CVE-2026-99273Noneksmbd: reserve space for the UTF-16 terminator in stream info
CVE-2026-99275Nonesmb: client: reject short SESSION_SETUP responses