Bus Reset Lifecycle Issue in Linux Kernel Affecting Broadcom Wi-Fi Drivers

CVE-2026-64586

What is CVE-2026-64586?

A vulnerability has been discovered in the Linux kernel affecting Broadcom's Wi-Fi drivers, specifically within the handling of bus reset operations during device removal. When a device is detached, the driver can enter a state where pending bus reset callbacks may attempt to access freed memory, leading to potential system instability or crashes. The issue arises from the improper scheduling and management of work items related to the bus reset process, which can outlive the driver instance. To mitigate this vulnerability, a mutex has been introduced to synchronize access during the device removal process, ensuring that any pending bus reset callbacks are properly managed and do not lead to dereferencing invalid memory. This patch enhances the overall stability of Broadcom Wi-Fi drivers and ensures safer device interactions within the Linux ecosystem.

References