wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()
In the Linux kernel, the following vulnerability has been resolved: wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() The function brcmf_usb_dl_writeimage() calls the function brcmf_usb_dl_cmd() but dose not check its return value. The 'state.state' and the 'state.bytes' are uninitialized if the function brcmf_usb_dl_cmd() fails. It is dangerous to use uninitialized variables in the conditions. Add error handling for brcmf_usb_dl_cmd() to jump to error handling path if the brcmf_usb_dl_cmd() fails and the 'state.state' and the 'state.bytes' are uninitialized. Improve the error message to report more detailed error information.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 5.10.238, 5.15.182, 5.4.294, 6.1.138, 6.12.28, 6.14.6, 6.6.90
- CVEs
- CVE-2025-37990
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 4 Nov 2026, 00:35 UTC · Revision 1
Source evidence
wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()
core-osv · Original sourcePublished 20 May 2025, 17:18 UTC
In the Linux kernel, the following vulnerability has been resolved: wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() The function brcmf_usb_dl_writeimage() calls the function brcmf_usb_dl_cmd() but dose not check its return value. The 'state.state' and the 'state.bytes' are uninitialized if the function brcmf_usb_dl_cmd() fails. It is dangerous to use uninitialized variables in the conditions. Add error handling for brcmf_usb_dl_cmd() to jump to error handling path if the brcmf_usb_dl_cmd() fails and the 'state.state' and the 'state.bytes' are uninitialized. Improve the error message to report more detailed error information.
osv:CVE-2025-37990
Kernel
Fixed versions: 5.4.294, 5.10.238, 5.15.182, 6.1.138, 6.6.90, 6.12.28, 6.14.6
Complete source record
{
"id": "ded98e3e21e284a45cd0dfc2308b48a883223c3f2028fa49dbe68dbd3e95684f",
"url": "https://osv.dev/vulnerability/CVE-2025-37990",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()",
"summary": "In the Linux kernel, the following vulnerability has been resolved: wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() The function brcmf_usb_dl_writeimage() calls the function brcmf_usb_dl_cmd() but dose not check its return value. The 'state.state' and the 'state.bytes' are uninitialized if the function brcmf_usb_dl_cmd() fails. It is dangerous to use uninitialized variables in the conditions. Add error handling for brcmf_usb_dl_cmd() to jump to error handling path if the brcmf_usb_dl_cmd() fails and the 'state.state' and the 'state.bytes' are uninitialized. Improve the error message to report more detailed error information.",
"evidence": "osv:CVE-2025-37990",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.294",
"evidence": "/affected/1/ranges"
},
{
"value": "5.10.238",
"evidence": "/affected/1/ranges"
},
{
"value": "5.15.182",
"evidence": "/affected/1/ranges"
},
{
"value": "6.1.138",
"evidence": "/affected/1/ranges"
},
{
"value": "6.6.90",
"evidence": "/affected/1/ranges"
},
{
"value": "6.12.28",
"evidence": "/affected/1/ranges"
},
{
"value": "6.14.6",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CVE-2025-37990",
"aliases": [
"CVE-2025-37990"
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "71bb244ba2fd5390eefe4ee9054abdb3f8b05922"
},
{
"fixed": "972bf75e53f778c78039c5d139dd47443a6d66a1"
},
{
"fixed": "62a4f2955d9a1745bdb410bf83fb16666d8865d6"
},
{
"fixed": "508be7c001437bacad7b9a43f08a723887bcd1ea"
},
{
"fixed": "524b70441baba453b193c418e3142bd31059cc1f"
},
{
"fixed": "08424a0922fb9e32a19b09d852ee87fb6c497538"
},
{
"fixed": "bdb435ef9815b1ae28eefffa01c6959d0fcf1fa7"
},
{
"fixed": "fa9b9f02212574ee1867fbefb0a675362a71b31d"
},
{
"fixed": "8e089e7b585d95122c8122d732d1d5ef8f879396"
}
]
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-37990.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "3.4.0"
},
{
"fixed": "5.4.294"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.5.0"
},
{
"fixed": "5.10.238"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.182"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "6.1.138"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.2.0"
},
{
"fixed": "6.6.90"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.7.0"
},
{
"fixed": "6.12.28"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.13.0"
},
{
"fixed": "6.14.6"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-37990.json"
}
}
],
"modified": "2026-10-28T02:30:32.621527943Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/08424a0922fb9e32a19b09d852ee87fb6c497538",
"https://git.kernel.org/stable/c/508be7c001437bacad7b9a43f08a723887bcd1ea",
"https://git.kernel.org/stable/c/524b70441baba453b193c418e3142bd31059cc1f",
"https://git.kernel.org/stable/c/62a4f2955d9a1745bdb410bf83fb16666d8865d6",
"https://git.kernel.org/stable/c/8e089e7b585d95122c8122d732d1d5ef8f879396",
"https://git.kernel.org/stable/c/972bf75e53f778c78039c5d139dd47443a6d66a1",
"https://git.kernel.org/stable/c/bdb435ef9815b1ae28eefffa01c6959d0fcf1fa7",
"https://git.kernel.org/stable/c/fa9b9f02212574ee1867fbefb0a675362a71b31d",
"https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html",
"https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/37xxx/CVE-2025-37990.json",
"https://nvd.nist.gov/vuln/detail/CVE-2025-37990",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/37xxx/CVE-2025-37990.json"
}
},
"related_cves": [
{
"value": "CVE-2025-37990",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 499352,
"published_at": "2025-05-20T17:18:45.366+00:00"
}