---
id: CVE-2026-31661
title: 'wifi: brcmsmac: Fix dma_free_coherent() size'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  wifi: brcmsmac: Fix dma_free_coherent() size

  dma_alloc_consistent() may change the size to align it. The new size is
  saved in alloced.

  Change the free size to match t…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 5b435de0d786869c95d1962121af0d7df2542009 <
    f449676bab54fea1440775c8c915dadb323fe015
  - >-
    Linux >= 5b435de0d786869c95d1962121af0d7df2542009 <
    3c204a0fd079fa7a867151a47d830ad1c2db5177
  - >-
    Linux >= 5b435de0d786869c95d1962121af0d7df2542009 <
    0f87777b74bcce29b966ec42d9aa8f9edd9b1667
  - >-
    Linux >= 5b435de0d786869c95d1962121af0d7df2542009 <
    4bf41c2731a0549e21f66180ff780b1e036639ab
  - >-
    Linux >= 5b435de0d786869c95d1962121af0d7df2542009 <
    77263f053963dea9f3962505ac0c768853d7dc59
  - >-
    Linux >= 5b435de0d786869c95d1962121af0d7df2542009 <
    b27fa888e4a426a3bcf6f6ab24701d888d9bf5aa
  - >-
    Linux >= 5b435de0d786869c95d1962121af0d7df2542009 <
    01f1330d3d1bee07e0c42d40cc48b7be8b6dad84
  - >-
    Linux >= 5b435de0d786869c95d1962121af0d7df2542009 <
    12cd7632757a54ce586e36040210b1a738a0fc53
  - Linux 3.2
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T15:23:42.907917Z'
published: '2026-04-24'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T15:32:21.544Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-31661'
references:
  - url: 'https://git.kernel.org/stable/c/f449676bab54fea1440775c8c915dadb323fe015'
  - url: 'https://git.kernel.org/stable/c/3c204a0fd079fa7a867151a47d830ad1c2db5177'
  - url: 'https://git.kernel.org/stable/c/0f87777b74bcce29b966ec42d9aa8f9edd9b1667'
  - url: 'https://git.kernel.org/stable/c/4bf41c2731a0549e21f66180ff780b1e036639ab'
  - url: 'https://git.kernel.org/stable/c/77263f053963dea9f3962505ac0c768853d7dc59'
  - url: 'https://git.kernel.org/stable/c/b27fa888e4a426a3bcf6f6ab24701d888d9bf5aa'
  - url: 'https://git.kernel.org/stable/c/01f1330d3d1bee07e0c42d40cc48b7be8b6dad84'
  - url: 'https://git.kernel.org/stable/c/12cd7632757a54ce586e36040210b1a738a0fc53'
tags:
  - cve.org
epss: 0.00114
epssPercentile: 0.01503
ingestedAt: '2026-11-06T15:54:04.050Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

wifi: brcmsmac: Fix dma_free_coherent() size

dma_alloc_consistent() may change the size to align it. The new size is
saved in alloced.

Change the free size to match the allocation size.

## Affected

- `Linux >= 5b435de0d786869c95d1962121af0d7df2542009 < f449676bab54fea1440775c8c915dadb323fe015`
- `Linux >= 5b435de0d786869c95d1962121af0d7df2542009 < 3c204a0fd079fa7a867151a47d830ad1c2db5177`
- `Linux >= 5b435de0d786869c95d1962121af0d7df2542009 < 0f87777b74bcce29b966ec42d9aa8f9edd9b1667`
- `Linux >= 5b435de0d786869c95d1962121af0d7df2542009 < 4bf41c2731a0549e21f66180ff780b1e036639ab`
- `Linux >= 5b435de0d786869c95d1962121af0d7df2542009 < 77263f053963dea9f3962505ac0c768853d7dc59`
- `Linux >= 5b435de0d786869c95d1962121af0d7df2542009 < b27fa888e4a426a3bcf6f6ab24701d888d9bf5aa`
- `Linux >= 5b435de0d786869c95d1962121af0d7df2542009 < 01f1330d3d1bee07e0c42d40cc48b7be8b6dad84`
- `Linux >= 5b435de0d786869c95d1962121af0d7df2542009 < 12cd7632757a54ce586e36040210b1a738a0fc53`
- `Linux 3.2`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.