Security tracker / CVE-2025-39863

CVE-2025-39863

wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in 61730d4dfffc ("brcmfmac: support critical protocol API for
 carnil> DHCP"). Vulnerable versions: 3.10.

Bugs

Status

Branch	Status
upstream	released (6.17-rc5) [9cb83d4be0b9b697eae93d321e0da999f9cdfcfc]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.16-upstream-stable	released (6.16.6) [2f6fbc8e04ca1d1d5c560be694199f847229c625]
6.12-upstream-stable	released (6.12.46) [3e789f8475f6c857c88de5c5bf4b24b11a477dd7]
6.6-upstream-stable	released (6.6.105) [f1150153c4e5940fe49ab51136343c5b4fe49d63]
6.1-upstream-stable	needed
5.10-upstream-stable	needed
sid	released (6.16.6-1)
6.12-trixie-security	released (6.12.48-1)
6.1-bookworm-security	needed
5.10-bullseye-security	needed