CVE-2026-53093 wifi: brcmfmac: Fix error pointer dereference

Medium 5.5 Published 24 Jun 2026 Updated 24 Jun 2026

A missing error check in the brcmfmac Wi-Fi driver allows dereferencing an error pointer, potentially causing a kernel crash.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2026-53093?

CVE-2026-53093 is a medium-severity vulnerability in Linux kernel, published on 24 Jun 2026. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

In the Linux kernel, the following vulnerability has been resolved:

wifi: brcmfmac: Fix error pointer dereference

The function brcmf_chip_add_core() can return an error pointer and is not checked. Add checks for error pointer.

Detected by Smatch: drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1010 brcmf_chip_recognition() error: 'core' dereferencing possible ERR_PTR()

drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1013 brcmf_chip_recognition() error: 'core' dereferencing possible ERR_PTR()

drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1016 brcmf_chip_recognition() error: 'core' dereferencing possible ERR_PTR()

drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1019 brcmf_chip_recognition() error: 'core' dereferencing possible ERR_PTR()

drivers/net/wireless/broadcom/brcm80211/brcmfmac/chip.c:1022 brcmf_chip_recognition() error: 'core' dereferencing possible ERR_PTR()

[add missing wifi: prefix]

Weakness: CWE-476

Which versions are affected by CVE-2026-53093?

It affects 1 product.

Products include Linux kernel.

How do I fix CVE-2026-53093?

Apply the vendor's patch.

Is CVE-2026-53093 being exploited?

There is no known exploitation of CVE-2026-53093 in the wild and no public exploit code.

All Linux kernel vulnerabilities

Sources

Also known as BELL-CVE-2026-53093, DEBIAN-CVE-2026-53093, GHSA-5hw3-x6vp-wc4h, ROOT-OS-DEBIAN-11-CVE-2026-53093, ROOT-OS-DEBIAN-12-CVE-2026-53093, ROOT-OS-UBUNTU-2204-CVE-2026-53093 and 2 more.