THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-64586 (HIGH 8.8) — In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: drain bus_reset work on device removal brcmf_fw_crashed() and the debugfs "reset" entry both schedule drvr->bus_reset, whose callback recovers drvr through container_of() and dereferences it. T

[NVD] CVE-2026-64586 (HIGH 8.8) — In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: drain bus_reset work on device removal brcmf_fw_crashed() and the debugfs "reset" entry both schedule drvr->bus_reset, whose callback recovers drvr through container_of() and dereferences it. T

mednvdPublished 2026-08-06

CVE-2026-64586 CVSS: 8.8 HIGH Published: 2026-08-06T08:16:33.830

In the Linux kernel, the following vulnerability has been resolved:

wifi: brcmfmac: drain bus_reset work on device removal

brcmf_fw_crashed() and the debugfs "reset" entry both schedule drvr->bus_reset, whose callback recovers drvr through container_of() and dereferences it. The removal path frees drvr (brcmf_free -> wiphy_free)

Indicators of compromise

CVE-2026-64586cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-64586