Buffer Over-Read in Linux Kernel RTL8723BS Driver

Publication date: 2026-06-25

Last updated on: 2026-07-06

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix buffer over-read in rtw_update_protection rtw_update_protection() is called with a pointer offset into the ies buffer but the full ie_length is passed, causing a potential buffer over-read.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-25

Last Modified

2026-07-06

Generated

2026-07-15

AI Q&A

2026-06-25

EPSS Evaluated

2026-07-14

NVD

CVE-2026-53179

EUVD

EUVD-2026-39270

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	From 6.19 (inc) to 7.0.13 (exc)
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	From 5.15 (inc) to 6.18.36 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Linux kernel's staging driver rtl8723bs. It involves the function rtw_update_protection(), which is called with a pointer that points to an offset inside the ies buffer. However, the function is passed the full length of the ies buffer (ie_length), not the length from the offset. This mismatch can cause the function to read beyond the intended buffer boundary, leading to a potential buffer over-read.

Impact Analysis

A buffer over-read vulnerability can lead to the program reading memory beyond the allocated buffer. This can cause crashes, data leakage, or undefined behavior. In this case, the Linux kernel could potentially read sensitive memory areas unintentionally, which might be exploited by attackers to gain information or cause denial of service.

Hi! I’m here to help you understand CVE-2026-53179. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70