CVE Explorer

CVE-2026-43386

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie The current code checks 'i + 5 < in_len' at the end of the if statement. However, it accesses 'in_ie[i + 5]' before that check, which can lead to an out-of-bounds read. Move the length check to the beginning of the conditional to ensure the index is within bounds before accessing the array.

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:ecaef6f1f268248adc031805200d378b4e0a4e335caeac984c022ccd1ad01a3f

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/staging/rtl8723bs/core/rtw_mlme.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"6ff2243d5e05a5239e39d4ba61d96b0ea3bf7259","status":"affected","version":"554c0a3abf216c991c5ebddcdb2c08689ecd290b","versionType":"git"},{"lessThan":"12cc6e8f8d4245b7b5a408c6fc8ab1d098d67020","status":"affected","version":"554c0a3abf216c991c5ebddcdb2c08689ecd290b","versionType":"git"},{"lessThan":"209644e25757c499e1c1f08c071ea0386d4448b6","status":"affected","version":"554c…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:8a00916e8535f0a7afedc40c066ad4270510c14c28e5c43c0acb8d38fc6aa22e · sha256:2b5f7093d3948c8c… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/staging/rtl8723bs/core/rtw_mlme.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.12"},{"lessThan":"4.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.167","versionType"…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:8a00916e8535f0a7afedc40c066ad4270510c14c28e5c43c0acb8d38fc6aa22e · sha256:2b5f7093d3948c8c… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:8a00916e8535f0a7afedc40c066ad4270510c14c28e5c43c0acb8d38fc6aa22e · sha256:2b5f7093d3948c8c… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:8a00916e8535f0a7afedc40c066ad4270510c14c28e5c43c0acb8d38fc6aa22e · sha256:2b5f7093d3948c8c… · /containers/cna/affected/1

Source references

8 source assertions

{"url":"https://git.kernel.org/stable/c/12cc6e8f8d4245b7b5a408c6fc8ab1d098d67020"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:8a00916e8535f0a7afedc40c066ad4270510c14c28e5c43c0acb8d38fc6aa22e · sha256:2b5f7093d3948c8c… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/209644e25757c499e1c1f08c071ea0386d4448b6"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:8a00916e8535f0a7afedc40c066ad4270510c14c28e5c43c0acb8d38fc6aa22e · sha256:2b5f7093d3948c8c… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/4dd2d9cf563c54e09d5f7eacf95c5b8f538b513b"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:8a00916e8535f0a7afedc40c066ad4270510c14c28e5c43c0acb8d38fc6aa22e · sha256:2b5f7093d3948c8c… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/6ff2243d5e05a5239e39d4ba61d96b0ea3bf7259"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:8a00916e8535f0a7afedc40c066ad4270510c14c28e5c43c0acb8d38fc6aa22e · sha256:2b5f7093d3948c8c… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/768f25613a9fe6766d15a4a72979657adfc1c6d8"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:8a00916e8535f0a7afedc40c066ad4270510c14c28e5c43c0acb8d38fc6aa22e · sha256:2b5f7093d3948c8c… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/a75281626fc8fa6dc6c9cc314ee423e8bc45203b"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:8a00916e8535f0a7afedc40c066ad4270510c14c28e5c43c0acb8d38fc6aa22e · sha256:2b5f7093d3948c8c… · /containers/cna/references/7

{"url":"https://git.kernel.org/stable/c/d97fc1b29513010b60fde874c7f0ba816744e18c"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:8a00916e8535f0a7afedc40c066ad4270510c14c28e5c43c0acb8d38fc6aa22e · sha256:2b5f7093d3948c8c… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/e14a1148f02e8cf1ca380d57e4b95ca36c97f45d"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:8a00916e8535f0a7afedc40c066ad4270510c14c28e5c43c0acb8d38fc6aa22e · sha256:2b5f7093d3948c8c… · /containers/cna/references/4

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer