Use-After-Free Vulnerability in Linux Kernel Affecting Broadcom Wi-Fi Driver

CVE-2025-39863

What is CVE-2025-39863?

A use-after-free vulnerability exists in the Linux kernel's Broadcom brcmfmac driver, specifically within the handling of the btcoex_info structure. This vulnerability arises due to race conditions that occur during the detachment and scheduling of the Wi-Fi coexistence timer. When the btcoex_info structure is freed while a worker function is executing or is scheduled, it can lead to memory access violations, causing potential instability or a denial-of-service resultant from improper memory management. To mitigate this risk, it is essential to revise the timer shutdown procedure to ensure proper synchronization, thus preventing misuse of freed memory.

References