CVE-2026-53178: staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction
In the Linux kernel, the following vulnerability has been resolved:
staging: rtl8723bs: rtwmlme: add bounds checks before ielength subtraction
Add guards to ensure ielength is large enough before subtracting fixed IE offsets to prevent unsigned integer underflow.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Apply the kernel fix by adding bounds checks in staging/rtl8723bs/rtw_mlme before performing the ie_length subtraction to prevent unsigned integer underflow.
Linux kernel (staging: rtl8723bs: rtw_mlme) ie_length subtraction bounds checks = Add bounds checks to ensure ie_length is large enough before subtracting fixed IE offsets
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53178?
The severity of CVE-2026-53178 is rated high with a score of 8.1.
How do I fix CVE-2026-53178?
To fix CVE-2026-53178, update your Linux kernel to the latest version that resolves this vulnerability.
What type of vulnerability is CVE-2026-53178?
CVE-2026-53178 is classified as an Integer Underflow vulnerability.
Which software is affected by CVE-2026-53178?
CVE-2026-53178 affects the Linux kernel, specifically the rtl8723bs staging driver.
What are the consequences of exploiting CVE-2026-53178?
Exploiting CVE-2026-53178 could lead to an unsigned integer underflow, potentially allowing for denial of service.