CVE-2026-64442

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description Out-of-bounds reads occur in the rtl8723bs staging driver due to missing header bounds checks in two Information Element (IE) parsing loops. Specifically, the functions issue assocreq() and join cmd hdl() dereference pIE->length without verifying if sufficient bytes remain in the buffer. If the IE data ends with only an element id byte and no length byte, the system reads one byte past the buffer end. This condition can be triggered by a malicious Access Point (AP) sending truncated final IEs within beacon or probe-response frames.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.