Broadcom BCM4352 wireless adapter driver throws out of bounds error and fails to detect all 5GHz channels

Bug #2110382 reported by Joe z
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
broadcom-sta (Ubuntu)
New
Undecided
Unassigned

Bug Description

[ 14.534937] ------------[ cut here ]------------
[ 14.534942] UBSAN: array-index-out-of-bounds in src/wl/sys/wl_cfg80211_hybrid.c:2410:26
[ 14.535622] index 1 is out of range for type 'uint8 [1]'
[ 14.536102] CPU: 8 UID: 0 PID: 752 Comm: wl_event_handle Tainted: P OE 6.14.0-15-generic #15-Ubuntu
[ 14.536107] Tainted: [P]=PROPRIETARY_MODULE, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
[ 14.536108] Hardware name: Micro-Star International Co., Ltd MS-7C02/B450 TOMAHAWK (MS-7C02), BIOS 1.I0 07/25/2022
[ 14.536110] Call Trace:
[ 14.536112] <TASK>
[ 14.536116] show_stack+0x49/0x60
[ 14.536121] dump_stack_lvl+0x5f/0x90
[ 14.536128] dump_stack+0x10/0x18
[ 14.536131] ubsan_epilogue+0x9/0x40
[ 14.536133] __ubsan_handle_out_of_bounds.cold+0x44/0x49
[ 14.536138] wl_update_bss_info+0x113/0x2c0 [wl]
[ 14.536179] wl_bss_connect_done.isra.0+0x13b/0x1a0 [wl]
[ 14.536211] wl_notify_connect_status+0xf3/0x300 [wl]
[ 14.536241] wl_event_handler+0x7b/0x1a0 [wl]
[ 14.536269] ? srso_return_thunk+0x5/0x5f
[ 14.536274] ? __pfx_wl_event_handler+0x10/0x10 [wl]
[ 14.536302] kthread+0xfc/0x230
[ 14.536306] ? __pfx_kthread+0x10/0x10
[ 14.536309] ret_from_fork+0x47/0x70
[ 14.536312] ? __pfx_kthread+0x10/0x10
[ 14.536314] ret_from_fork_asm+0x1a/0x30
[ 14.536322] </TASK>
[ 14.536323] ---[ end trace ]---
[ 14.558246] ------------[ cut here ]------------
[ 14.558250] UBSAN: array-index-out-of-bounds in src/wl/sys/wl_linux.c:1944:4
[ 14.558934] index 2 is out of range for type 'ether_addr [1]'
[ 14.559415] CPU: 1 UID: 0 PID: 138 Comm: kworker/u48:1 Tainted: P OE 6.14.0-15-generic #15-Ubuntu
[ 14.559419] Tainted: [P]=PROPRIETARY_MODULE, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
[ 14.559420] Hardware name: Micro-Star International Co., Ltd MS-7C02/B450 TOMAHAWK (MS-7C02), BIOS 1.I0 07/25/2022
[ 14.559422] Workqueue: ipv6_addrconf addrconf_dad_work
[ 14.559427] Call Trace:
[ 14.559428] <TASK>
[ 14.559430] show_stack+0x49/0x60
[ 14.559434] dump_stack_lvl+0x5f/0x90
[ 14.559438] dump_stack+0x10/0x18
[ 14.559440] ubsan_epilogue+0x9/0x40
[ 14.559443] __ubsan_handle_out_of_bounds.cold+0x44/0x49
[ 14.559447] _wl_set_multicast_list+0x220/0x240 [wl]
[ 14.559487] wl_set_multicast_list+0x3a/0xa0 [wl]
[ 14.559517] __dev_set_rx_mode+0x6c/0xd0
[ 14.559522] __dev_mc_add+0x94/0xa0
[ 14.559524] dev_mc_add+0x10/0x20
[ 14.559526] igmp6_group_added+0xe0/0x100
[ 14.559530] __ipv6_dev_mc_inc+0x291/0x420
[ 14.559534] ipv6_dev_mc_inc+0x10/0x20
[ 14.559536] addrconf_dad_work+0xb3/0x4e0
[ 14.559542] process_one_work+0x177/0x350
[ 14.559547] worker_thread+0x34a/0x480
[ 14.559549] ? srso_return_thunk+0x5/0x5f
[ 14.559552] ? _raw_spin_lock_irqsave+0xe/0x20
[ 14.559555] ? __pfx_worker_thread+0x10/0x10
[ 14.559557] kthread+0xfc/0x230
[ 14.559560] ? __pfx_kthread+0x10/0x10
[ 14.559563] ret_from_fork+0x47/0x70
[ 14.559566] ? __pfx_kthread+0x10/0x10
[ 14.559569] ret_from_fork_asm+0x1a/0x30
[ 14.559575] </TASK>
[ 14.559589] ---[ end trace ]---

I see the above in dmesg.
Description: Ubuntu 25.04
Release: 25.04
6.14.0-15-generic #15-Ubuntu

broadcom-sta-dkms:
  Installed: 6.30.223.271-26ubuntu1
  Candidate: 6.30.223.271-26ubuntu1
  Version table:

In general works in 2.4GHz but in 5GHz it only show channels below 50. Had to switch manually on router, however same machine dual boot to windows server 2022 and channel 106 was working fine.

ProblemType: Bug
DistroRelease: Ubuntu 25.04
Package: broadcom-sta-dkms 6.30.223.271-26ubuntu1 [modified: usr/src/broadcom-sta-6.30.223.271/dkms.conf]
ProcVersionSignature: Ubuntu 6.14.0-15.15-generic 6.14.0
Uname: Linux 6.14.0-15-generic x86_64
NonfreeKernelModules: nvidia_modeset nvidia wl
ApportVersion: 2.32.0-0ubuntu5
Architecture: amd64
CasperMD5CheckResult: unknown
Date: Sun May 11 10:43:32 2025
InstallationDate: Installed on 2016-04-23 (3305 days ago)
InstallationMedia: Xubuntu 16.04 LTS "Xenial Xerus" - Release amd64 (20160420.1)
ProcEnviron:
 LANG=en_IE.UTF-8
 LANGUAGE=en_IE:en
 PATH=(custom, no user)
 SHELL=/bin/bash
 TERM=rxvt-256color
SourcePackage: broadcom-sta
UpgradeStatus: Upgraded to plucky on 2025-05-10 (1 days ago)
modified.conffile..etc.modprobe.d.broadcom-sta-dkms.conf: [deleted]

Revision history for this message
Joe z (rzet) wrote :
Revision history for this message
Janet729Shires (janet729shires) wrote :

It seems you're experiencing a common issue with Broadcom wireless drivers (broadcom-sta-dkms) on Ubuntu 25.04, where your 5GHz Wi-Fi is limited to channels below 50, even though your router and the same hardware on Windows Server 2022 support higher channels (like 106). This points to a driver-level or regulatory domain misconfiguration within your Ubuntu installation. https://www.upsers.us.com

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Bug attachments