In the Linux kernel, the following vulnerability has been resolved:
wifi: brcm80211: fmac: Add error handling for brcmfusbdl_writeimage()
The function brcmfusbdlwriteimage() calls the function brcmfusbdlcmd() but dose not check its return value. The 'state.state' and the 'state.bytes' are uninitialized if the function brcmfusbdl_cmd() fails. It is dangerous to use uninitialized variables in the conditions.
Add error handling for brcmfusbdlcmd() to jump to error handling path if the brcmfusbdlcmd() fails and the 'state.state' and the 'state.bytes' are uninitialized.
Improve the error message to report more detailed error information.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fa9b9f02212574ee1867fbefb0a675362a71b31d",
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/usb.c"
},
"id": "CVE-2025-37990-19e50f61",
"digest": {
"line_hashes": [
"291486101966493771784287064410802465301",
"217718134957077560672216307973885804161",
"301734225066841022866382777928469593782",
"47893905199738476828053814018487234000",
"278940476378043070436210242760826613302",
"20679683534001485389870042709367052104",
"208919934622005618190216156802410190410",
"129847533601012839220979216766030294557"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@972bf75e53f778c78039c5d139dd47443a6d66a1",
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/usb.c"
},
"id": "CVE-2025-37990-1aadd23c",
"digest": {
"line_hashes": [
"291486101966493771784287064410802465301",
"217718134957077560672216307973885804161",
"301734225066841022866382777928469593782",
"47893905199738476828053814018487234000",
"278940476378043070436210242760826613302",
"20679683534001485389870042709367052104",
"208919934622005618190216156802410190410",
"129847533601012839220979216766030294557"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@62a4f2955d9a1745bdb410bf83fb16666d8865d6",
"signature_version": "v1",
"signature_type": "Function",
"target": {
"function": "brcmf_usb_dl_writeimage",
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/usb.c"
},
"id": "CVE-2025-37990-1c5e4bc0",
"digest": {
"length": 1356.0,
"function_hash": "296656070626726549232195878902848551865"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@08424a0922fb9e32a19b09d852ee87fb6c497538",
"signature_version": "v1",
"signature_type": "Function",
"target": {
"function": "brcmf_usb_dl_writeimage",
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/usb.c"
},
"id": "CVE-2025-37990-413a05ed",
"digest": {
"length": 1356.0,
"function_hash": "296656070626726549232195878902848551865"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e089e7b585d95122c8122d732d1d5ef8f879396",
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/usb.c"
},
"id": "CVE-2025-37990-4f3edae1",
"digest": {
"line_hashes": [
"291486101966493771784287064410802465301",
"217718134957077560672216307973885804161",
"301734225066841022866382777928469593782",
"47893905199738476828053814018487234000",
"278940476378043070436210242760826613302",
"20679683534001485389870042709367052104",
"208919934622005618190216156802410190410",
"129847533601012839220979216766030294557"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bdb435ef9815b1ae28eefffa01c6959d0fcf1fa7",
"signature_version": "v1",
"signature_type": "Function",
"target": {
"function": "brcmf_usb_dl_writeimage",
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/usb.c"
},
"id": "CVE-2025-37990-58cb8719",
"digest": {
"length": 1356.0,
"function_hash": "296656070626726549232195878902848551865"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@972bf75e53f778c78039c5d139dd47443a6d66a1",
"signature_version": "v1",
"signature_type": "Function",
"target": {
"function": "brcmf_usb_dl_writeimage",
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/usb.c"
},
"id": "CVE-2025-37990-6cd60534",
"digest": {
"length": 1356.0,
"function_hash": "296656070626726549232195878902848551865"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fa9b9f02212574ee1867fbefb0a675362a71b31d",
"signature_version": "v1",
"signature_type": "Function",
"target": {
"function": "brcmf_usb_dl_writeimage",
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/usb.c"
},
"id": "CVE-2025-37990-70d3fce1",
"digest": {
"length": 1356.0,
"function_hash": "296656070626726549232195878902848551865"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@524b70441baba453b193c418e3142bd31059cc1f",
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/usb.c"
},
"id": "CVE-2025-37990-77245918",
"digest": {
"line_hashes": [
"291486101966493771784287064410802465301",
"217718134957077560672216307973885804161",
"301734225066841022866382777928469593782",
"47893905199738476828053814018487234000",
"278940476378043070436210242760826613302",
"20679683534001485389870042709367052104",
"208919934622005618190216156802410190410",
"129847533601012839220979216766030294557"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bdb435ef9815b1ae28eefffa01c6959d0fcf1fa7",
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/usb.c"
},
"id": "CVE-2025-37990-8a4672e6",
"digest": {
"line_hashes": [
"291486101966493771784287064410802465301",
"217718134957077560672216307973885804161",
"301734225066841022866382777928469593782",
"47893905199738476828053814018487234000",
"278940476378043070436210242760826613302",
"20679683534001485389870042709367052104",
"208919934622005618190216156802410190410",
"129847533601012839220979216766030294557"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@508be7c001437bacad7b9a43f08a723887bcd1ea",
"signature_version": "v1",
"signature_type": "Function",
"target": {
"function": "brcmf_usb_dl_writeimage",
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/usb.c"
},
"id": "CVE-2025-37990-a6c8f6c9",
"digest": {
"length": 1356.0,
"function_hash": "296656070626726549232195878902848551865"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@08424a0922fb9e32a19b09d852ee87fb6c497538",
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/usb.c"
},
"id": "CVE-2025-37990-ae8446bf",
"digest": {
"line_hashes": [
"291486101966493771784287064410802465301",
"217718134957077560672216307973885804161",
"301734225066841022866382777928469593782",
"47893905199738476828053814018487234000",
"278940476378043070436210242760826613302",
"20679683534001485389870042709367052104",
"208919934622005618190216156802410190410",
"129847533601012839220979216766030294557"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@508be7c001437bacad7b9a43f08a723887bcd1ea",
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/usb.c"
},
"id": "CVE-2025-37990-b5c0df78",
"digest": {
"line_hashes": [
"291486101966493771784287064410802465301",
"217718134957077560672216307973885804161",
"301734225066841022866382777928469593782",
"47893905199738476828053814018487234000",
"278940476378043070436210242760826613302",
"20679683534001485389870042709367052104",
"208919934622005618190216156802410190410",
"129847533601012839220979216766030294557"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@524b70441baba453b193c418e3142bd31059cc1f",
"signature_version": "v1",
"signature_type": "Function",
"target": {
"function": "brcmf_usb_dl_writeimage",
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/usb.c"
},
"id": "CVE-2025-37990-ba89abc3",
"digest": {
"length": 1356.0,
"function_hash": "296656070626726549232195878902848551865"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e089e7b585d95122c8122d732d1d5ef8f879396",
"signature_version": "v1",
"signature_type": "Function",
"target": {
"function": "brcmf_usb_dl_writeimage",
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/usb.c"
},
"id": "CVE-2025-37990-c16e3057",
"digest": {
"length": 1356.0,
"function_hash": "296656070626726549232195878902848551865"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@62a4f2955d9a1745bdb410bf83fb16666d8865d6",
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/usb.c"
},
"id": "CVE-2025-37990-d786f76a",
"digest": {
"line_hashes": [
"291486101966493771784287064410802465301",
"217718134957077560672216307973885804161",
"301734225066841022866382777928469593782",
"47893905199738476828053814018487234000",
"278940476378043070436210242760826613302",
"20679683534001485389870042709367052104",
"208919934622005618190216156802410190410",
"129847533601012839220979216766030294557"
],
"threshold": 0.9
},
"deprecated": false
}
]