Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-64446

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie() supplicant_ie is a 256-byte array in struct security_priv. The WPA and WPA2 IE copy paths use: memcpy(padapter->securitypriv.supplicant_ie, &pwpa[0], wpa_ielen + 2); where wpa_ielen is the raw IE length field (u8, 0-255). When a local user supplies a connect request via nl80211 with a crafted WPA IE of length 255, wpa_ielen + 2 equals 257, overflow
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:66da33d51bfb0738d4eeb0585cc7fba7cd08b311bbaf7c2cb458b3ecd9168943
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"a94a643a80a84ceb8139061c3d6bf988d75e45a5","status":"affected","version":"554c0a3abf216c991c5ebddcdb2c08689ecd290b","versionType":"git"},{"lessThan":"2131621986c62c86109ce4d84cf73a73757eb8a6","status":"affected","version":"554c0a3abf216c991c5ebddcdb2c08689ecd290b","versionType":"git"},{"lessThan":"6f20d7b0ee47c470734a69379b0fc6647c519603","status":"affected","versio…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:80aa653c6143c4063587ebb82fdb23b108d5362f2238cbe6abe66dcd48b33329 · sha256:a2f223db392a1d3a… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.12"},{"lessThan":"4.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.261","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.212","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.178","vers…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:80aa653c6143c4063587ebb82fdb23b108d5362f2238cbe6abe66dcd48b33329 · sha256:a2f223db392a1d3a… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"a94a643a80a84ceb8139061c3d6bf988d75e45a5","status":"affected","version":"554c0a3abf216c991c5ebddcdb2c08689ecd290b","versionType":"git"},{"lessThan":"2131621986c62c86109ce4d84cf73a73757eb8a6","status":"affected","version":"554c0a3abf216c991c5ebddcdb2c08689ecd290b","versionType":"git"},{"lessThan":"6f20d7b0ee47c470734a69379b0fc6647c519603","status":"affected","versio…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:80aa653c6143c4063587ebb82fdb23b108d5362f2238cbe6abe66dcd48b33329 · sha256:a2f223db392a1d3a… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.12"},{"lessThan":"4.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.261","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.212","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.178","vers…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:80aa653c6143c4063587ebb82fdb23b108d5362f2238cbe6abe66dcd48b33329 · sha256:a2f223db392a1d3a… · /containers/cna/affected/1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/138cd190efd56ab36c9fdd8fef8749d06937f24b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:80aa653c6143c4063587ebb82fdb23b108d5362f2238cbe6abe66dcd48b33329 · sha256:a2f223db392a1d3a… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/2131621986c62c86109ce4d84cf73a73757eb8a6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:80aa653c6143c4063587ebb82fdb23b108d5362f2238cbe6abe66dcd48b33329 · sha256:a2f223db392a1d3a… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/46f66c16a95191d9aca07a72ae6b1252a244e26c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:80aa653c6143c4063587ebb82fdb23b108d5362f2238cbe6abe66dcd48b33329 · sha256:a2f223db392a1d3a… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/5a752a616e756844388a1a45404db9fc29fec655"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:80aa653c6143c4063587ebb82fdb23b108d5362f2238cbe6abe66dcd48b33329 · sha256:a2f223db392a1d3a… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/5d7812360abf3143afcbf5efe4ef242448fa1f28"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:80aa653c6143c4063587ebb82fdb23b108d5362f2238cbe6abe66dcd48b33329 · sha256:a2f223db392a1d3a… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/6f20d7b0ee47c470734a69379b0fc6647c519603"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:80aa653c6143c4063587ebb82fdb23b108d5362f2238cbe6abe66dcd48b33329 · sha256:a2f223db392a1d3a… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/a94a643a80a84ceb8139061c3d6bf988d75e45a5"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:80aa653c6143c4063587ebb82fdb23b108d5362f2238cbe6abe66dcd48b33329 · sha256:a2f223db392a1d3a… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/b9c4bf133c3c47e23baf4f5403b98a953bf58606"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:80aa653c6143c4063587ebb82fdb23b108d5362f2238cbe6abe66dcd48b33329 · sha256:a2f223db392a1d3a… · /containers/cna/references/5

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer