CVE-2026-43387
kernel: staging: rtl8723bs: properly validate the data in rtw_get_ie_ex()
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 8, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's rtl8723bs Wi-Fi driver. This memory corruption vulnerability, specifically an out-of-bounds read, occurs because the driver does not properly validate the length of data in received network frames within the rtw_get_ie_ex() function. A remote attacker could exploit this by sending specially crafted frames, potentially leading to information disclosure or a denial of service.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-125 · Out-of-bounds Read