CVE-2026-64443

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read exists in the update beacon info() function within the rtl8723bs staging driver. The Information Element (IE) parsing loop incorrectly manages buffer boundaries by only checking if the index i is less than the length len. A malicious access point can trigger this by sending a Beacon frame where the last IE has only one byte remaining, causing the loop to read the pIE->length variable from outside the allocated receive buffer. Furthermore, the pIE->length value can extend the data window beyond the buffer length, resulting in truncated IEs being passed to handler functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.