CVE-2025-37990: Linux kernel · wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()
Affects Linux kernelSource GCVE Database
Not known to be exploited.
Data as of 5 Nov 2026, 21:51 UTC
Rated Medium by Threat Radar's AI analysis · No CVSS score from NVD or the CNA
Thin evidence
One scorer or noneExploitation evidence
Disclosed: evidence found.
CVE published 20 May 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 5 Nov 2026.
What to do
AI-suggested
A fix has been implemented in the Linux kernel to add error handling for brcmf_usb_dl_cmd() within brcmf_usb_dl_writeimage(). Users should apply the official Linux kernel updates that include this patch to remediate the issue.
Description
A vulnerability in the Linux kernel's brcm80211 wireless driver was addressed by adding error handling for the function brcmf_usb_dl_writeimage(). Previously, this function did not check the return value of brcmf_usb_dl_cmd(), leading to use of uninitialized variables if the call failed. This could cause unsafe conditions in the driver. The fix adds proper error handling and improves error reporting.
References
- git.kernel.org/stable/c/972bf75e53f778c78039c5d139dd47443a6d66a1 (opens in a new tab)
- git.kernel.org/stable/c/62a4f2955d9a1745bdb410bf83fb16666d8865d6 (opens in a new tab)
- git.kernel.org/stable/c/508be7c001437bacad7b9a43f08a723887bcd1ea (opens in a new tab)
- git.kernel.org/stable/c/524b70441baba453b193c418e3142bd31059cc1f (opens in a new tab)
- git.kernel.org/stable/c/08424a0922fb9e32a19b09d852ee87fb6c497538 (opens in a new tab)
- git.kernel.org/stable/c/bdb435ef9815b1ae28eefffa01c6959d0fcf1fa7 (opens in a new tab)
- git.kernel.org/stable/c/fa9b9f02212574ee1867fbefb0a675362a71b31d (opens in a new tab)
- git.kernel.org/stable/c/8e089e7b585d95122c8122d732d1d5ef8f879396 (opens in a new tab)
- lists.debian.org/debian-lts-announce/2025/10/msg00007.html (opens in a new tab)
- lists.debian.org/debian-lts-announce/2025/08/msg00010.html (opens in a new tab)