CVE-2026-68190
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
10/08/2026
Last modified:
19/08/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie()<br />
<br />
rtw_get_wps_ie() iterates over IE data from network frames without<br />
validating that the IE header and payload fit within the remaining<br />
buffer before reading them. Specifically:<br />
<br />
- in_ie[cnt + 1] is read without checking cnt + 1
Impact
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/0e95ff792ae0aa6fbad9455943e9e1e4062670e9
- https://git.kernel.org/stable/c/23b630e334f7e8f76bb22a18aca350da995af905
- https://git.kernel.org/stable/c/23c31f107b4f8f420a754a45d12599bdb78f9bb8
- https://git.kernel.org/stable/c/630fdca3f2437fee3ffd437c4b646ccf84c7be87
- https://git.kernel.org/stable/c/875479f18835ac11e21a83e88f3d4dc7ccdcd0c4
- https://git.kernel.org/stable/c/b9d9a4cd2e59df7281992a076464d2536e80c674
- https://git.kernel.org/stable/c/c670efe69ec8a3360bfa596436f0250a3bf15d42