CVE-2026-68190

A flaw was found in the Linux kernel's rtl8723bs Wi-Fi driver. The rtw_get_wps_ie() function, responsible for processing network frame data, fails to properly validate the size of incoming information elements (IEs). This oversight allows an attacker to trigger an out-of-bounds read, potentially leading to the disclosure of sensitive information or system instability. The vulnerability occurs when the driver attempts to read beyond the allocated buffer due to malformed IE data.

This issue affects Realtek rtl8723bs Wi-Fi (staging). rtw_get_wps_ie() does not validate IE bounds before reading. Systems without rtl8723bs hardware are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the r8723bs module from loading. See https://access.redhat.com/solutions/41278 for instructions.