{"id":"CVE-2026-80949","summary":"wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control()","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control()\n\nThe memory allocated for buf is not freed in some of the error paths in\nbrcmf_sdio_read_control(). Fix that by adding vfree() calls.\n\n[arend: rework as suggested by Johannes]","modified":"2026-09-18T18:26:40.044250327Z","published":"2026-09-11T19:42:19.707Z","related":["openSUSE-SU-2026:11805-1"],"database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80949.json","cna_assigner":"Linux"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/0d10db8e94fcb23a799789aaa696b4d8f937e207"},{"type":"WEB","url":"https://git.kernel.org/stable/c/261d7c7610b4b2f476382c88a2d1ae0cc5e07add"},{"type":"WEB","url":"https://git.kernel.org/stable/c/7704f6ba2a8c492b07a3eaa1e311b4b30d389246"},{"type":"WEB","url":"https://git.kernel.org/stable/c/86b57fa3172e287bc083113507a965e6d9a46a45"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a732c4f36a4cd79f3702391f88ebb56f2e43b0ee"},{"type":"WEB","url":"https://git.kernel.org/stable/c/b1d0a90a844abccdfed9fe141b5d0d654a821485"},{"type":"WEB","url":"https://git.kernel.org/stable/c/ba04715ee672c336272be3ceb43bda9ffc33eb75"},{"type":"WEB","url":"https://git.kernel.org/stable/c/fdb880a7d575efe8b5c7b5b819b96d9251a3937f"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80949.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80949"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"dd43a01c5cdb811adeb09e6a2d2788f8aa0d0969"},{"fixed":"b1d0a90a844abccdfed9fe141b5d0d654a821485"},{"fixed":"86b57fa3172e287bc083113507a965e6d9a46a45"},{"fixed":"a732c4f36a4cd79f3702391f88ebb56f2e43b0ee"},{"fixed":"7704f6ba2a8c492b07a3eaa1e311b4b30d389246"},{"fixed":"fdb880a7d575efe8b5c7b5b819b96d9251a3937f"},{"fixed":"261d7c7610b4b2f476382c88a2d1ae0cc5e07add"},{"fixed":"ba04715ee672c336272be3ceb43bda9ffc33eb75"},{"fixed":"0d10db8e94fcb23a799789aaa696b4d8f937e207"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-80949.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.8.0"},{"fixed":"5.10.270"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.221"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.188"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.157"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.109"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.50"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.2.4"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-80949.json"}}],"schema_version":"1.9.0"}