The Linux kernel's brcmfmac wireless driver contained a flaw where the function brcmf_chip_add_core() could return an error pointer that was not checked before dereferencing in brcmf_chip_recognition(). This could cause a null pointer dereference, leading to a denial of service condition. The issue was identified by the Smatch static analysis tool and resolved by adding proper error pointer checks to prevent dereferencing invalid pointers.

This vulnerability can cause a denial of service (system crash or kernel panic) due to null pointer dereference in the wireless driver. There is no impact on confidentiality or integrity. The attack vector requires local access with low privileges, and no user interaction is needed.

A fix has been applied to the Linux kernel source code to add error pointer checks in the brcmfmac driver. Users should update their Linux kernel to a version that includes this fix. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor or Linux kernel advisory for the exact fixed versions and apply the official update accordingly.