CVE-2026-68190: staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie()
In the Linux kernel, the following vulnerability has been resolved:
staging: rtl8723bs: fix OOB reads in rtwgetwpsie()
rtwgetwpsie() iterates over IE data from network frames without validating that the IE header and payload fit within the remaining buffer before reading them. Specifically:
- inie[cnt + 1] is read without checking cnt + 1 < inlen - memcmp(&inie[cnt + 2], ...) accesses cnt + 2 without bounds check - inie[cnt + 1] is used as length without verifying payload fits
Add bounds checks at the top of the loop body to break early if fewer than 2 bytes remain for the IE header, or if the declared payload extends past the end of the buffer. Also require at least 4 bytes of payload before comparing the WPS OUI.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
In rtw_get_wps_ie(), add bounds checks at the top of the loop body and break early when fewer bytes remain; require at least 4 bytes before reading in_ie[cnt + 1] or comparing using memcmp(&in_ie[cnt + 2], ...) and validate that the declared IE payload fits within the remaining buffer before comparing the WPS OUI.
Linux kernel OOB read bounds checks in rtw_get_wps_ie() = Add bounds checks at the top of the loop body to break early if fewer bytes remain; require at least 4 bytes of IE header before reading in_ie[cnt + 1] and memcmp(&in_ie[cnt + 2], ...).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68190?
The severity of CVE-2026-68190 is rated as risk 26.
How do I fix CVE-2026-68190?
To fix CVE-2026-68190, update your Linux kernel to the latest version that includes the patch for this vulnerability.
What does CVE-2026-68190 impact?
CVE-2026-68190 impacts the Linux kernel's handling of network frames that could lead to out-of-bounds reads.
Is CVE-2026-68190 remote exploit possible?
Yes, CVE-2026-68190 could be exploited remotely if the affected functionality is exposed to untrusted network traffic.
What systems are affected by CVE-2026-68190?
CVE-2026-68190 affects systems running the Linux kernel version that includes the rtl8723bs staging driver.