CVE-2025-68256: staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser
In the Linux kernel, the following vulnerability has been resolved:
staging: rtl8723bs: fix out-of-bounds read in rtwgetie() parser
The Information Element (IE) parser rtwgetie() trusted the length byte of each IE without validating that the IE body (len bytes after the 2-byte header) fits inside the remaining frame buffer. A malformed frame can advertise an IE length larger than the available data, causing the parser to increment its pointer beyond the buffer end. This results in out-of-bounds reads or, depending on the pattern, an infinite loop.
Fix by validating that (offset + 2 + len) does not exceed the limit before accepting the IE or advancing to the next element.
This prevents OOB reads and ensures the parser terminates safely on malformed frames.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Update the rtw_get_ie() IE parser to validate that the advertised IE body length fits in the remaining frame buffer: ensure (offset + 2 + len) does not exceed the limit before accepting the IE or incrementing the parser pointer.
Linux kernel (staging: rtl8723bs) rtw_get_ie() IE length validation = Validate that (offset + 2 + len) does not exceed the remaining frame buffer limit before accepting the IE or advancing to the next element.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68256?
CVE-2025-68256 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2025-68256?
To fix CVE-2025-68256, ensure that you update your Linux kernel to the latest stable version that contains the patch.
What are the consequences of CVE-2025-68256?
CVE-2025-68256 can lead to an out-of-bounds read, potentially allowing an attacker to exploit a memory corruption issue.
Which versions of the Linux kernel are affected by CVE-2025-68256?
CVE-2025-68256 affects specific versions of the Linux kernel where the rtl8723bs driver is utilized.
How can I determine if my system is vulnerable to CVE-2025-68256?
You can determine if your system is vulnerable to CVE-2025-68256 by checking the kernel version and reviewing any installed patches.