Skip to content

Commit b09586b

Browse files
committed
Remove insecure broadcom-sta driver from hardware profiles
The broadcom-sta driver package is marked as insecure due to CVE-2019-9501 and CVE-2019-9502 (heap buffer overflow vulnerabilities allowing remote code execution). The driver is also unmaintained and incompatible with modern Linux kernel security mitigations. Removed broadcom_sta from extraModulePackages and the corresponding "wl" kernel module. This resolves test failures where Nixpkgs refuses to evaluate configurations containing this insecure package.
1 parent e214e29 commit b09586b

File tree

5 files changed

+0
-16
lines changed

5 files changed

+0
-16
lines changed

apple/imac/14-2/default.nix

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,6 @@
2929
"bcma"
3030
];
3131
kernelPackages = lib.mkIf (lib.versionOlder pkgs.linux.version "6.0") pkgs.linuxPackages_latest;
32-
extraModulePackages = [ config.boot.kernelPackages.broadcom_sta ];
3332
};
3433

3534
hardware = {

apple/macbook-air/6/default.nix

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,8 +3,6 @@
33
{
44
imports = [ ../. ];
55

6-
boot.kernelModules = [ "wl" ];
7-
boot.extraModulePackages = [ config.boot.kernelPackages.broadcom_sta ];
86
boot.blacklistedKernelModules = [ "bcma" ];
97

108
boot = {

apple/macbook-pro/11-1/default.nix

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -6,9 +6,5 @@
66
../../../common/cpu/intel/haswell
77
];
88

9-
# broadcom-wl
109
hardware.enableRedistributableFirmware = lib.mkDefault true;
11-
# nixos-generate-config doesn't detect this automatically.
12-
boot.extraModulePackages = with config.boot.kernelPackages; [ broadcom_sta ];
13-
boot.kernelModules = [ "wl" ];
1410
}

dell/inspiron/3442/default.nix

Lines changed: 0 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -12,10 +12,4 @@
1212
fwupd.enable = lib.mkDefault true;
1313
thermald.enable = lib.mkDefault true;
1414
};
15-
16-
boot = {
17-
# needs to be explicitly loaded or else bluetooth/wifi won't work.
18-
kernelModules = [ "wl" ];
19-
extraModulePackages = [ config.boot.kernelPackages.broadcom_sta ];
20-
};
2115
}

dell/xps/13-9343/default.nix

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -13,11 +13,8 @@
1313
};
1414

1515
boot = {
16-
# needs to be explicitly loaded or else bluetooth/wifi won't work
1716
kernelModules = [
1817
"kvm-intel"
19-
"wl"
2018
];
21-
extraModulePackages = [ config.boot.kernelPackages.broadcom_sta ];
2219
};
2320
}

0 commit comments

Comments
 (0)