Not yet scoredPublished Oct 22, 2025

CVE-2023-53715wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex

Updated under an hour ago (Oct 27, 2026, 5:40 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex Apparently the hex passphrase mechanism does not work on newer chips/firmware (e.g. BCM4387). It seems there was a simple way of passing it in binary all along, so use that and avoid the hexification. OpenBSD has been doing it like this from the beginning, so this should work on all chips. Also clear the structure before setting the PMK. This was leaking uninitialized stack contents to the device.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from b8a64f0e96c2b258321ee03975aeb0f5e88a055b before 1687845eb8f37360a9ee849a3587ab659b090773; from b8a64f0e96c2b258321ee03975aeb0f5e88a055b before 2bc34facb90ceeff6f8c17d2006575a6d07c3825; from b8a64f0e96c2b258321ee03975aeb0f5e88a055b before 56c7e9c39bd54fd753c0c4b1ed10278cbd3a5f02; from b8a64f0e96c2b258321ee03975aeb0f5e88a055b before 4e8dc0e5c7636efaadbd7e488acd34b4291c0431; from b8a64f0e96c2b258321ee03975aeb0f5e88a055b before e242c66f7ecfe8f5b6eb308f4ea464fd8589c866; from b8a64f0e96c2b258321ee03975aeb0f5e88a055b before f8a6c53ff1d91acd5a20eb627edbffd816eb9a4e; from b8a64f0e96c2b258321ee03975aeb0f5e88a055b before 2fa3a5226b05e0a797c68b9609dcebe0cd236b27; from b8a64f0e96c2b258321ee03975aeb0f5e88a055b before 89b89e52153fda2733562776c7c9d9d3ebf8dd6d	CNA record

References

References

https://git.kernel.org/stable/c/1687845eb8f37360a9ee849a3587ab659b090773
https://git.kernel.org/stable/c/2bc34facb90ceeff6f8c17d2006575a6d07c3825
https://git.kernel.org/stable/c/56c7e9c39bd54fd753c0c4b1ed10278cbd3a5f02
https://git.kernel.org/stable/c/4e8dc0e5c7636efaadbd7e488acd34b4291c0431
https://git.kernel.org/stable/c/e242c66f7ecfe8f5b6eb308f4ea464fd8589c866
https://git.kernel.org/stable/c/f8a6c53ff1d91acd5a20eb627edbffd816eb9a4e
https://git.kernel.org/stable/c/2fa3a5226b05e0a797c68b9609dcebe0cd236b27
https://git.kernel.org/stable/c/89b89e52153fda2733562776c7c9d9d3ebf8dd6d

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.