CVE-2026-68190

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read issue exists in the rtw get wps ie() function within the rtl8723bs staging driver. The function iterates over Information Element (IE) data from network frames without properly validating that the IE header and payload fit within the remaining buffer. This leads to several unsafe operations: reading in ie[cnt + 1] without verifying it is within in len, accessing cnt + 2 via memcmp() without a bounds check, and using in ie[cnt + 1] as a length without confirming the payload fits in the buffer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.