CVE-2026-43386

staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie

published May 8, 2026

CVSS
—
EPSS
0%
Percentile
5.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie

The current code checks 'i + 5 < in_len' at the end of the if statement.

However, it accesses 'in_ie[i + 5]' before that check, which can lead

to an out-of-bounds read. Move the length check to the beginning of the

conditional to ensure the index is within bounds before accessing the

array.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00167 · 5.6th percentile
Published
2026-05-08T14:21Z
EPSS history
Timeline
  • 08 MAY 14:21Z
    staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie
    cvelistv5