---
id: CVE-2026-53093
title: 'wifi: brcmfmac: Fix error pointer dereference'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  wifi: brcmfmac: Fix error pointer dereference

  The function brcmf_chip_add_core() can return an error pointer and is
  not checked. Add checks for error pointer.

  Detecte…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= cb7cf7be9eba76f3cd6258906074c72084570c84 <
    a3b45090a91e2f0b9715870d8f8d9ca2fdfbc1af
  - >-
    Linux >= cb7cf7be9eba76f3cd6258906074c72084570c84 <
    99ef547659178eef6d6ba4738a9d989ce90cf909
  - >-
    Linux >= cb7cf7be9eba76f3cd6258906074c72084570c84 <
    bd6c906e0c4af6d5d0c49c3c4ee090b4913da17d
  - >-
    Linux >= cb7cf7be9eba76f3cd6258906074c72084570c84 <
    d3f280be48f1c672cb10e8026c236d0cca60048a
  - >-
    Linux >= cb7cf7be9eba76f3cd6258906074c72084570c84 <
    2e0e5a43ed126f896a4ad31ade66c90270601bae
  - >-
    Linux >= cb7cf7be9eba76f3cd6258906074c72084570c84 <
    cbea71b4480394708f9a6e007a0385acfe5e1ec8
  - >-
    Linux >= cb7cf7be9eba76f3cd6258906074c72084570c84 <
    334c68750eee84c2327db1d152be83ff5ad8e20b
  - >-
    Linux >= cb7cf7be9eba76f3cd6258906074c72084570c84 <
    dd8592fc6007a451c3e4b9025de365e39de8178a
  - Linux 3.15
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T16:18:16.323882Z'
published: '2026-06-24'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T16:23:59.189Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-53093'
references:
  - url: 'https://git.kernel.org/stable/c/a3b45090a91e2f0b9715870d8f8d9ca2fdfbc1af'
  - url: 'https://git.kernel.org/stable/c/99ef547659178eef6d6ba4738a9d989ce90cf909'
  - url: 'https://git.kernel.org/stable/c/bd6c906e0c4af6d5d0c49c3c4ee090b4913da17d'
  - url: 'https://git.kernel.org/stable/c/d3f280be48f1c672cb10e8026c236d0cca60048a'
  - url: 'https://git.kernel.org/stable/c/2e0e5a43ed126f896a4ad31ade66c90270601bae'
  - url: 'https://git.kernel.org/stable/c/cbea71b4480394708f9a6e007a0385acfe5e1ec8'
  - url: 'https://git.kernel.org/stable/c/334c68750eee84c2327db1d152be83ff5ad8e20b'
  - url: 'https://git.kernel.org/stable/c/dd8592fc6007a451c3e4b9025de365e39de8178a'
tags:
  - cve.org
epss: 0.00162
epssPercentile: 0.05466
ingestedAt: '2026-11-06T16:57:43.294Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

wifi: brcmfmac: Fix error pointer dereference

The function brcmf_chip_add_core() can return an error pointer and is
not checked. Add checks for error pointer.

Detected by Smatch:
drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1010 brcmf_chip_recognition() error:
'core' dereferencing possible ERR_PTR()

drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1013 brcmf_chip_recognition() error:
'core' dereferencing possible ERR_PTR()

drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1016 brcmf_chip_recognition() error:
'core' dereferencing possible ERR_PTR()

drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1019 brcmf_chip_recognition() error:
'core' dereferencing possible ERR_PTR()

drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1022 brcmf_chip_recognition() error:
'core' dereferencing possible ERR_PTR()

[add missing wifi: prefix]

## Affected

- `Linux >= cb7cf7be9eba76f3cd6258906074c72084570c84 < a3b45090a91e2f0b9715870d8f8d9ca2fdfbc1af`
- `Linux >= cb7cf7be9eba76f3cd6258906074c72084570c84 < 99ef547659178eef6d6ba4738a9d989ce90cf909`
- `Linux >= cb7cf7be9eba76f3cd6258906074c72084570c84 < bd6c906e0c4af6d5d0c49c3c4ee090b4913da17d`
- `Linux >= cb7cf7be9eba76f3cd6258906074c72084570c84 < d3f280be48f1c672cb10e8026c236d0cca60048a`
- `Linux >= cb7cf7be9eba76f3cd6258906074c72084570c84 < 2e0e5a43ed126f896a4ad31ade66c90270601bae`
- `Linux >= cb7cf7be9eba76f3cd6258906074c72084570c84 < cbea71b4480394708f9a6e007a0385acfe5e1ec8`
- `Linux >= cb7cf7be9eba76f3cd6258906074c72084570c84 < 334c68750eee84c2327db1d152be83ff5ad8e20b`
- `Linux >= cb7cf7be9eba76f3cd6258906074c72084570c84 < dd8592fc6007a451c3e4b9025de365e39de8178a`
- `Linux 3.15`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.