[Bug 2139534] Re: broadcom-sta-dkms package causes UBSAN array-index-out-of-bounds errors and system crashes on Kernel 6.14.0-37

Status changed to 'Confirmed' because the bug affects multiple users.

** Changed in: linux (Ubuntu)
Status: New => Confirmed

--
You received this bug notification because you are subscribed to linux
in Ubuntu.
Matching subscriptions: Bgg, Bmail, Nb
https://bugs.launchpad.net/bugs/2139534

Title:
broadcom-sta-dkms package causes UBSAN array-index-out-of-bounds
errors and system crashes on Kernel 6.14.0-37

Status in linux package in Ubuntu:
Confirmed
Status in linux source package in Noble:
Confirmed

Bug description:
Problem Description:

On the same hardware (iMac Mid 2015 with BCM4360), the broadcom-sta-
dkms package causes severe instability on Kernel 6.14.0-37.

Loading the driver triggers UBSAN (Undefined Behavior Sanitizer)
errors, resulting in frequent system restarts or kernel panics.

Dmesg Output:



kernel: UBSAN: array-index-out-of-bounds in src/wl/sys/wl_cfg80211_hybrid.c:2398:26
kernel: index 1 is out of range for type 'uint8 [1]'
kernel: UBSAN: array-index-out-of-bounds in src/wl/sys/wl_linux.c:1939:4
kernel: index 2 is out of range for type 'ether_addr [1]'




This driver seems incompatible with Linux Kernel 6.8. As the closed-
source driver is effectively broken for this hardware, support for
this chip ID in the open-source brcmfmac driver is the only viable
path forward.

Logs: (wl_crash_log.txt)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2139534/+subscriptions