CVE-2026-43387
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() Just like in commit 154828bf9559 ("staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser"), we don't trust the data in the frame so we should check the length better before acting on it
- Published May 8, 2026
- CVSS 5.5 medium
- 0.2% chance of exploitation in the next 30 days (EPSS)
- A fix is available