Medium 5.5Published Jun 24, 2026

CVE-2026-53093wifi: brcmfmac: Fix error pointer dereference

Updated under an hour ago (Oct 28, 2026, 11:40 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix error pointer dereference The function brcmf_chip_add_core() can return an error pointer and is not checked. Add checks for error pointer. Detected by Smatch: drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1010 brcmf_chip_recognition() error: 'core' dereferencing possible ERR_PTR() drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1013 brcmf_chip_recognition() error: 'core' dereferencing possible ERR_PTR() drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1016 brcmf_chip_recognition() error: 'core' dereferencing possible ERR_PTR() drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1019 brcmf_chip_recognition() error: 'core' dereferencing possible ERR_PTR() drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1022 brcmf_chip_recognition() error: 'core' dereferencing possible ERR_PTR() [add missing wifi: prefix]

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Jun 24, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from cb7cf7be9eba76f3cd6258906074c72084570c84 before a3b45090a91e2f0b9715870d8f8d9ca2fdfbc1af; from cb7cf7be9eba76f3cd6258906074c72084570c84 before 99ef547659178eef6d6ba4738a9d989ce90cf909; from cb7cf7be9eba76f3cd6258906074c72084570c84 before bd6c906e0c4af6d5d0c49c3c4ee090b4913da17d; from cb7cf7be9eba76f3cd6258906074c72084570c84 before d3f280be48f1c672cb10e8026c236d0cca60048a; from cb7cf7be9eba76f3cd6258906074c72084570c84 before 2e0e5a43ed126f896a4ad31ade66c90270601bae; from cb7cf7be9eba76f3cd6258906074c72084570c84 before cbea71b4480394708f9a6e007a0385acfe5e1ec8; from cb7cf7be9eba76f3cd6258906074c72084570c84 before 334c68750eee84c2327db1d152be83ff5ad8e20b; from cb7cf7be9eba76f3cd6258906074c72084570c84 before dd8592fc6007a451c3e4b9025de365e39de8178a	CNA record
linux linux_kernel linux:linux_kernel	from 3.15 before 5.10.258; from 5.11 before 5.15.209; from 5.16 before 6.1.175; from 6.2 before 6.6.141; from 6.7 before 6.12.91; from 6.13 before 6.18.33; from 6.19 before 7.0.10	NVD

References

References

https://git.kernel.org/stable/c/a3b45090a91e2f0b9715870d8f8d9ca2fdfbc1af	patch
https://git.kernel.org/stable/c/99ef547659178eef6d6ba4738a9d989ce90cf909	patch
https://git.kernel.org/stable/c/bd6c906e0c4af6d5d0c49c3c4ee090b4913da17d	patch
https://git.kernel.org/stable/c/d3f280be48f1c672cb10e8026c236d0cca60048a	patch
https://git.kernel.org/stable/c/2e0e5a43ed126f896a4ad31ade66c90270601bae	patch
https://git.kernel.org/stable/c/cbea71b4480394708f9a6e007a0385acfe5e1ec8	patch
https://git.kernel.org/stable/c/334c68750eee84c2327db1d152be83ff5ad8e20b	patch
https://git.kernel.org/stable/c/dd8592fc6007a451c3e4b9025de365e39de8178a	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.