REDHAT-BUG-2467014: Medium severity Linux Linux kernel (brcmfmac) vulnerability

Published May 6, 2026
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

wifi: brcmfmac: validate bsscfg indices in IF events

brcmffwehhandleifevent() validates the firmware-provided interface index before it touches drvr->iflist[], but it still uses the raw bsscfgidx field as an array index without a matching range check.

Reject IF events whose bsscfg index does not fit in drvr->iflist[] before indexing the interface array.

[add missing wifi prefix]

Affected Software

1 affected component
Linux Linux kernel (brcmfmac)

Event History

May 6, 2026
Data Sourced
via Red Hat·10:03 AM
DescriptionSeverityAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of REDHAT-BUG-2467014?

The severity of REDHAT-BUG-2467014 is classified as medium (4).

2

How do I fix REDHAT-BUG-2467014?

To fix REDHAT-BUG-2467014, update to the latest version of the Linux kernel that addresses this vulnerability.

3

What software is affected by REDHAT-BUG-2467014?

REDHAT-BUG-2467014 affects the Linux kernel, specifically the brcmfmac component.

4

What type of vulnerability is REDHAT-BUG-2467014?

REDHAT-BUG-2467014 is a vulnerability in the Linux kernel related to improper validation of firmware-provided interface indices.

5

When was REDHAT-BUG-2467014 published?

REDHAT-BUG-2467014 was published on May 6, 2026.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203