CVE-2026-80949
Last modified
CVE-2026-80949 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control() The memory allocated for buf is not freed in some of the error paths in brcmf_sdio_read_control(). Fix that by adding vfree() calls. [arend: rework as suggested by Johannes]. EPSS estimates a 0.17% chance of exploitation in the next 30 days.
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control() The memory allocated for buf is not freed in some of the error paths in brcmf_sdio_read_control(). Fix that by adding vfree() calls. [arend: rework as suggested by Johannes]
Metrics
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= dd43a01c5cdb811adeb09e6a2d2788f8aa0d0969, < b1d0a90a844abccdfed9fe141b5d0d654a821485; >= dd43a01c5cdb811adeb09e6a2d2788f8aa0d0969, < 86b57fa3172e287bc083113507a965e6d9a46a45; >= dd43a01c5cdb811adeb09e6a2d2788f8aa0d0969, < a732c4f36a4cd79f3702391f88ebb56f2e43b0ee; >= dd43a01c5cdb811adeb09e6a2d2788f8aa0d0969, < 7704f6ba2a8c492b07a3eaa1e311b4b30d389246; >= dd43a01c5cdb811adeb09e6a2d2788f8aa0d0969, < fdb880a7d575efe8b5c7b5b819b96d9251a3937f; >= dd43a01c5cdb811adeb09e6a2d2788f8aa0d0969, < 261d7c7610b4b2f476382c88a2d1ae0cc5e07add; >= dd43a01c5cdb811adeb09e6a2d2788f8aa0d0969, < ba04715ee672c336272be3ceb43bda9ffc33eb75; >= dd43a01c5cdb811adeb09e6a2d2788f8aa0d0969, < 0d10db8e94fcb23a799789aaa696b4d8f937e207 |
| Linux | Linux | 3.8 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-80949?
How severe is CVE-2026-80949?
How do I fix CVE-2026-80949?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-80943In the Linux kernel, the following vulnerability has been re…7.6
- CVE-2026-80944In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-80945In the Linux kernel, the following vulnerability has been re…9.1
- CVE-2026-80946In the Linux kernel, the following vulnerability has been re…
- CVE-2026-80947In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-80948In the Linux kernel, the following vulnerability has been re…
- CVE-2026-8095The Frontend File Manager Plugin plugin for WordPress is vul…8.1
- CVE-2026-80950In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-80951In the Linux kernel, the following vulnerability has been re…
- CVE-2026-80952In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-80953In the Linux kernel, the following vulnerability has been re…8.4
- CVE-2026-80954In the Linux kernel, the following vulnerability has been re…7.8
Are you affected by CVE-2026-80949?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST