CVE-2026-64446

kernel: staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 25, 2026

Updated · August 8, 2026

Description

A flaw was found in the Linux kernel's rtl8723bs Wi-Fi driver. A local user can exploit this vulnerability by supplying a crafted Wi-Fi Protected Access (WPA) Information Element (IE) during a connection request. This can lead to a one-byte heap buffer overflow, potentially causing memory corruption and affecting system stability or leading to information disclosure.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')