In the Linux kernel, the following vulnerability has been resolved: wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() The function brcmf_usb_dl_writeimage() calls the function brcmf_usb_dl_cmd() but dose not check its return value. The 'state.state' and the 'state.bytes' are uninitialized if the function brcmf_usb_dl_cmd() fails. It is dangerous to use uninitialized variables in the conditions. Add error handling for brcmf_usb_dl_cmd() to jump to error handling path if the brcmf_usb_dl_cmd() fails and the 'state.state' and the 'state.bytes' are uninitialized. Improve the error message to report more detailed error information.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/08424a0922fb9e32a19b09d852ee87fb6c497538 cve-icon cve-icon
https://git.kernel.org/stable/c/508be7c001437bacad7b9a43f08a723887bcd1ea cve-icon cve-icon
https://git.kernel.org/stable/c/524b70441baba453b193c418e3142bd31059cc1f cve-icon cve-icon
https://git.kernel.org/stable/c/62a4f2955d9a1745bdb410bf83fb16666d8865d6 cve-icon cve-icon
https://git.kernel.org/stable/c/8e089e7b585d95122c8122d732d1d5ef8f879396 cve-icon cve-icon
https://git.kernel.org/stable/c/972bf75e53f778c78039c5d139dd47443a6d66a1 cve-icon cve-icon
https://git.kernel.org/stable/c/bdb435ef9815b1ae28eefffa01c6959d0fcf1fa7 cve-icon cve-icon
https://git.kernel.org/stable/c/fa9b9f02212574ee1867fbefb0a675362a71b31d cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025052000-CVE-2025-37990-62bd@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-37990 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-37990 cve-icon
History

Mon, 14 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00061}

 epss

{'score': 0.00051}

Wed, 09 Jul 2025 02:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

 cvssV3_1

{'score': 4.1, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'}

Wed, 04 Jun 2025 13:00:00 +0000

Type Values Removed Values Added
References

Thu, 22 May 2025 02:45:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Moderate

Tue, 20 May 2025 17:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() The function brcmf_usb_dl_writeimage() calls the function brcmf_usb_dl_cmd() but dose not check its return value. The 'state.state' and the 'state.bytes' are uninitialized if the function brcmf_usb_dl_cmd() fails. It is dangerous to use uninitialized variables in the conditions. Add error handling for brcmf_usb_dl_cmd() to jump to error handling path if the brcmf_usb_dl_cmd() fails and the 'state.state' and the 'state.bytes' are uninitialized. Improve the error message to report more detailed error information.
Title wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-06-04T12:57:39.422Z

Reserved: 2025-04-16T04:51:23.976Z

Link: CVE-2025-37990

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-05-20T18:15:45.883

Modified: 2025-06-04T13:15:27.940

Link: CVE-2025-37990

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-05-20T00:00:00Z

Links: CVE-2025-37990 - Bugzilla