CVE - CVE-2025-37990

CVE-ID
CVE-2025-37990	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() The function brcmf_usb_dl_writeimage() calls the function brcmf_usb_dl_cmd() but dose not check its return value. The 'state.state' and the 'state.bytes' are uninitialized if the function brcmf_usb_dl_cmd() fails. It is dangerous to use uninitialized variables in the conditions. Add error handling for brcmf_usb_dl_cmd() to jump to error handling path if the brcmf_usb_dl_cmd() fails and the 'state.state' and the 'state.bytes' are uninitialized. Improve the error message to report more detailed error information.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/08424a0922fb9e32a19b09d852ee87fb6c497538 URL:https://git.kernel.org/stable/c/08424a0922fb9e32a19b09d852ee87fb6c497538 MISC:https://git.kernel.org/stable/c/508be7c001437bacad7b9a43f08a723887bcd1ea URL:https://git.kernel.org/stable/c/508be7c001437bacad7b9a43f08a723887bcd1ea MISC:https://git.kernel.org/stable/c/524b70441baba453b193c418e3142bd31059cc1f URL:https://git.kernel.org/stable/c/524b70441baba453b193c418e3142bd31059cc1f MISC:https://git.kernel.org/stable/c/8e089e7b585d95122c8122d732d1d5ef8f879396 URL:https://git.kernel.org/stable/c/8e089e7b585d95122c8122d732d1d5ef8f879396 MISC:https://git.kernel.org/stable/c/bdb435ef9815b1ae28eefffa01c6959d0fcf1fa7 URL:https://git.kernel.org/stable/c/bdb435ef9815b1ae28eefffa01c6959d0fcf1fa7 MISC:https://git.kernel.org/stable/c/fa9b9f02212574ee1867fbefb0a675362a71b31d URL:https://git.kernel.org/stable/c/fa9b9f02212574ee1867fbefb0a675362a71b31d
Assigning CNA
kernel.org
Date Record Created
20250416	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250416)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)