-

CVE-2026-43387

staging: rtl8723bs: properly validate the data in rtw_get_ie_ex()

In the Linux kernel, the following vulnerability has been resolved:

staging: rtl8723bs: properly validate the data in rtw_get_ie_ex()

Just like in commit 154828bf9559 ("staging: rtl8723bs: fix out-of-bounds
read in rtw_get_ie() parser"), we don't trust the data in the frame so
we should check the length better before acting on it
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 554c0a3abf216c991c5ebddcdb2c08689ecd290b
Version < ac38856092b4c994f94343251b30520bdeb7f475
Status affected
Version 554c0a3abf216c991c5ebddcdb2c08689ecd290b
Version < 35969c3a208a07cb8642301df5869c34e2db7071
Status affected
Version 554c0a3abf216c991c5ebddcdb2c08689ecd290b
Version < 8097a48c606a9306281ea7bd73bf2afc97553733
Status affected
Version 554c0a3abf216c991c5ebddcdb2c08689ecd290b
Version < 740bca8bbdb707c0e4bb11e3316deb2f04fc7ce1
Status affected
Version 554c0a3abf216c991c5ebddcdb2c08689ecd290b
Version < 821f7d759fb2de33c5e5b0c4981181c4d0c3e9b1
Status affected
Version 554c0a3abf216c991c5ebddcdb2c08689ecd290b
Version < 6d62fa548387e159a21ea95132c09bfc96d336ed
Status affected
Version 554c0a3abf216c991c5ebddcdb2c08689ecd290b
Version < 9a4cd4c37593cc8b8d28f9a6732b490a8032006a
Status affected
Version 554c0a3abf216c991c5ebddcdb2c08689ecd290b
Version < f0109b9d3e1e455429279d602f6276e34689750a
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.12
Status affected
Version 0
Version < 4.12
Status unaffected
Version <= 5.10.*
Version 5.10.253
Status unaffected
Version <= 5.15.*
Version 5.15.203
Status unaffected
Version <= 6.1.*
Version 6.1.167
Status unaffected
Version <= 6.6.*
Version 6.6.130
Status unaffected
Version <= 6.12.*
Version 6.12.78
Status unaffected
Version <= 6.18.*
Version 6.18.19
Status unaffected
Version <= 6.19.*
Version 6.19.9
Status unaffected
Version <= *
Version 7.0
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.03% 0.094
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.