CVE-2023-53715

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex Apparently the hex passphrase mechanism does not work on newer chips/firmware (e.g. BCM4387). It seems there was a simple way of passing it in binary all along, so use that and avoid the hexification. OpenBSD has been doing it like this from the beginning, so this should work on all chips. Also clear the structure before setting the PMK. This was leaking uninitialized stack contents to the device.

• https://git.kernel.org/stable/c/1687845eb8f37360a9ee849a3587ab659b090773
• https://git.kernel.org/stable/c/2bc34facb90ceeff6f8c17d2006575a6d07c3825
• https://git.kernel.org/stable/c/2fa3a5226b05e0a797c68b9609dcebe0cd236b27
• https://git.kernel.org/stable/c/4e8dc0e5c7636efaadbd7e488acd34b4291c0431
• https://git.kernel.org/stable/c/56c7e9c39bd54fd753c0c4b1ed10278cbd3a5f02
• https://git.kernel.org/stable/c/89b89e52153fda2733562776c7c9d9d3ebf8dd6d
• https://git.kernel.org/stable/c/e242c66f7ecfe8f5b6eb308f4ea464fd8589c866
• https://git.kernel.org/stable/c/f8a6c53ff1d91acd5a20eb627edbffd816eb9a4e

Published

Oct 22, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-5371RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3…6.5
• CVE-2023-53710In the Linux kernel, the following vulnerability has been re…
• CVE-2023-53711In the Linux kernel, the following vulnerability has been re…8.2
• CVE-2023-53712In the Linux kernel, the following vulnerability has been re…
• CVE-2023-53713In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2023-53714In the Linux kernel, the following vulnerability has been re…
• CVE-2023-53716In the Linux kernel, the following vulnerability has been re…
• CVE-2023-53717In the Linux kernel, the following vulnerability has been re…
• CVE-2023-53718In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2023-53719In the Linux kernel, the following vulnerability has been re…
• CVE-2023-5372The post-authentication command injection vulnerability in Z…7.2
• CVE-2023-53720In the Linux kernel, the following vulnerability has been re…