CVE-2026-31626
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
24/04/2026
Last modified:
24/04/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify()<br />
<br />
Initialize le_tmp64 to zero in rtw_BIP_verify() to prevent using<br />
uninitialized data.<br />
<br />
Smatch warns that only 6 bytes are copied to this 8-byte (u64)<br />
variable, leaving the last two bytes uninitialized:<br />
<br />
drivers/staging/rtl8723bs/core/rtw_security.c:1308 rtw_BIP_verify()<br />
warn: not copying enough bytes for &#39;&le_tmp64&#39; (8 vs 6 bytes)<br />
<br />
Initializing the variable at the start of the function fixes this<br />
warning and ensures predictable behavior.



