{"cve":"CVE-2026-80949","nvd":{"published":"2026-09-11T20:19:00.563","modified":"2026-10-19T09:17:26.257","status":"Received","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control()\n\nThe memory allocated for buf is not freed in some of the error paths in\nbrcmf_sdio_read_control(). Fix that by adding vfree() calls.\n\n[arend: rework as suggested by Johannes]","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["https://git.kernel.org/stable/c/0d10db8e94fcb23a799789aaa696b4d8f937e207","https://git.kernel.org/stable/c/261d7c7610b4b2f476382c88a2d1ae0cc5e07add","https://git.kernel.org/stable/c/7704f6ba2a8c492b07a3eaa1e311b4b30d389246","https://git.kernel.org/stable/c/86b57fa3172e287bc083113507a965e6d9a46a45","https://git.kernel.org/stable/c/a732c4f36a4cd79f3702391f88ebb56f2e43b0ee"],"products":[],"source":"nvd","synced_at":"2026-10-19T22:53:43.293028046+00:00"},"epss":{"cve":"CVE-2026-80949","score":0.00177,"percentile":0.07169,"date":"2026-10-25"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}