CVE-2026-43386: staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie
In the Linux kernel, the following vulnerability has been resolved:
staging: rtl8723bs: fix potential out-of-bounds read in rtwrestructwmmie
The current code checks 'i + 5 < inlen' at the end of the if statement. However, it accesses 'inie[i + 5]' before that check, which can lead to an out-of-bounds read. Move the length check to the beginning of the conditional to ensure the index is within bounds before accessing the array.
Affected Software
Remediation
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The CVSS vector indicates local access and low privileges are required. No user interaction is required.
What security impact is indicated?
The issue can cause an out-of-bounds read in rtl8723bs WMM information-element processing. The CVSS vector rates confidentiality and availability impact as high, with no integrity impact.
Is a fix available?
Yes. A patch is available, with stable kernel commits referenced in the advisory.