Skip to main content
CVE-2026-99061VulnerabilityPublished Updated

Microsoft · wifi: brcmfmac: fix P2P device removal race in brcmf_detach()

Affects MicrosoftSource GCVE Database

0
Compare
Authoritative record:CVE-2026-99061· High

Not known to be exploited · fixed in eef16a74ff8ed2a838d6bb862bb2c7783fce7466 : patch Microsoft soon.

Data as of 7 Nov 2026, 12:32 UTC

Severity
High

Rated by Threat Radar · CVSS not yet scored by NVD

Thin evidence

One scorer or none
Patch
Available – fixed in eef16a74ff8ed2a838d6bb862bb2c7783fce7466, c4c0659eb74f807e0e73742b101a07b0bb703d97, 75e917473e20dea61f837f9afb5fc3435c9200d2 +5

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 23 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 7 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 9831bcb987df4aff6a1d85975f1dda4c654f298d, < eef16a74ff8ed2a838d6bb862bb2c7783fce7466
Fixed in
  • eef16a74ff8ed2a838d6bb862bb2c7783fce7466
LinuxLinuxAffected
  • ≥ 9831bcb987df4aff6a1d85975f1dda4c654f298d, < c4c0659eb74f807e0e73742b101a07b0bb703d97
Fixed in
  • c4c0659eb74f807e0e73742b101a07b0bb703d97
LinuxLinuxAffected
  • ≥ 9831bcb987df4aff6a1d85975f1dda4c654f298d, < 75e917473e20dea61f837f9afb5fc3435c9200d2
Fixed in
  • 75e917473e20dea61f837f9afb5fc3435c9200d2
LinuxLinuxAffected
  • ≥ 9831bcb987df4aff6a1d85975f1dda4c654f298d, < 47ca6395a1d91545cc9403f9218bc61be941a0c3
Fixed in
  • 47ca6395a1d91545cc9403f9218bc61be941a0c3
LinuxLinuxAffected
  • ≥ 9831bcb987df4aff6a1d85975f1dda4c654f298d, < 08a3f02fea636e97a7422d1512f76dacdb5b0887
Fixed in
  • 08a3f02fea636e97a7422d1512f76dacdb5b0887
LinuxLinuxAffected
  • ≥ 9831bcb987df4aff6a1d85975f1dda4c654f298d, < 7b79131e357c4786765b20a994ad40d4d35f2163
Fixed in
  • 7b79131e357c4786765b20a994ad40d4d35f2163

Description

This vulnerability involves a race condition in the brcmfmac WiFi driver related to P2P device removal in the brcmf_detach() function. It affects Microsoft products with versions 3.0 and 4.0. No CVSS score or detailed impact information is provided.

References

Community reviews

Loading reviews…