CVE-2026-43386
Received Received - Intake
Out-of-Bounds Read in Linux Kernel RTL8723BS WiFi Driver

Publication date: 2026-05-08

Last updated on: 2026-05-08

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie The current code checks 'i + 5 < in_len' at the end of the if statement. However, it accesses 'in_ie[i + 5]' before that check, which can lead to an out-of-bounds read. Move the length check to the beginning of the conditional to ensure the index is within bounds before accessing the array.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-05-08
Last Modified
2026-05-08
Generated
2026-05-09
AI Q&A
2026-05-08
EPSS Evaluated
N/A
NVD
EUVD
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
linux linux_kernel to 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (exc)
linux linux_kernel *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability exists in the Linux kernel's staging driver rtl8723bs. The issue is a potential out-of-bounds read caused by accessing an array element before verifying that the index is within the valid range. Specifically, the code accesses 'in_ie[i + 5]' before checking if 'i + 5' is less than the input length, which can lead to reading memory outside the intended bounds.

The fix involves moving the length check to the beginning of the conditional statement to ensure the index is within bounds before accessing the array.


How can this vulnerability impact me? :

An out-of-bounds read vulnerability can potentially lead to information disclosure or cause a system crash if the kernel reads invalid memory. However, the exact impact depends on how the vulnerable code is used and whether an attacker can exploit this to gain sensitive information or disrupt system operations.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart