CVE-2026-74648

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> staging: rtl8723bs: validate monitor transmit frame lengths<br /> <br /> rtw_cfg80211_monitor_if_xmit_entry() removes the radiotap header and<br /> then reads the 802.11 frame control field without checking that a base<br /> 802.11 header remains.<br /> <br /> The data path also pulls the calculated 802.11, QoS and SNAP header<br /> span before confirming that the skb contains it. A truncated frame can<br /> therefore cause out-of-bounds reads or leave insufficient data for the<br /> Ethernet address writes.<br /> <br /> Reject frames that do not contain the base 802.11 header and data<br /> frames that do not contain their complete calculated header span.