CVE-2026-31661 PUBLISHED

wifi: brcmsmac: Fix dma_free_coherent() size

Assigner: Linux
Reserved: 09.03.2026 Published: 24.04.2026 Updated: 24.04.2026

In the Linux kernel, the following vulnerability has been resolved:

wifi: brcmsmac: Fix dma_free_coherent() size

dma_alloc_consistent() may change the size to align it. The new size is saved in alloced.

Change the free size to match the allocation size.

Vendor	Linux
Product	Linux
Versions	Default: unaffected affected from 5b435de0d786869c95d1962121af0d7df2542009 to f449676bab54fea1440775c8c915dadb323fe015 (excl.) affected from 5b435de0d786869c95d1962121af0d7df2542009 to 3c204a0fd079fa7a867151a47d830ad1c2db5177 (excl.) affected from 5b435de0d786869c95d1962121af0d7df2542009 to 0f87777b74bcce29b966ec42d9aa8f9edd9b1667 (excl.) affected from 5b435de0d786869c95d1962121af0d7df2542009 to 4bf41c2731a0549e21f66180ff780b1e036639ab (excl.) affected from 5b435de0d786869c95d1962121af0d7df2542009 to 77263f053963dea9f3962505ac0c768853d7dc59 (excl.) affected from 5b435de0d786869c95d1962121af0d7df2542009 to b27fa888e4a426a3bcf6f6ab24701d888d9bf5aa (excl.) affected from 5b435de0d786869c95d1962121af0d7df2542009 to 01f1330d3d1bee07e0c42d40cc48b7be8b6dad84 (excl.) affected from 5b435de0d786869c95d1962121af0d7df2542009 to 12cd7632757a54ce586e36040210b1a738a0fc53 (excl.)

Vendor	Linux
Product	Linux
Versions	Default: affected Version 3.2 is affected unaffected from 0 to 3.2 (excl.) unaffected from 5.10.253 to 5.10.* (incl.) unaffected from 5.15.203 to 5.15.* (incl.) unaffected from 6.1.169 to 6.1.* (incl.) unaffected from 6.6.135 to 6.6.* (incl.) unaffected from 6.12.82 to 6.12.* (incl.) unaffected from 6.18.23 to 6.18.* (incl.) unaffected from 6.19.13 to 6.19.* (incl.) unaffected from 7.0 to * (incl.)