Linux Kernel Uninitialized Variable Vulnerability in brcm80211 FMAC Driver

A vulnerability in the Linux kernel's brcm80211 FMAC driver for Wi-Fi has been addressed. The issue arose because the function brcmf_usb_dl_writeimage() called brcmf_usb_dl_cmd() without checking the return value. This oversight left the 'state.state' and 'state.bytes' variables uninitialized, creating a risk by using these variables in conditions. The vulnerability has been resolved by adding error handling for brcmf_usb_dl_cmd(), ensuring that if the command fails and the variables are uninitialized, the function jumps to an error handling path. Additionally, the error message has been improved to provide more detailed information.

Impact

The vulnerability could lead to the use of uninitialized variables, potentially causing undefined behavior in the driver.