CVE-2026-43387

Published: May 8, 2026Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() Just like in commit 154828bf9559 ("staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser"), we don't trust the data in the frame so we should check the length better before acting on it

Affected (10)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 4.12 to 5.10.253
Linux Linux Kernel	From 5.11 to 5.15.203
Linux Linux Kernel	From 5.16 to 6.1.167
Linux Linux Kernel	From 6.13 to 6.18.19
Linux Linux Kernel	From 6.19 to 6.19.9
Linux Linux Kernel	From 6.2 to 6.6.130
Linux Linux Kernel	From 6.7 to 6.12.78
Linux Linux Kernel	Version 7.0 rc1
Linux Linux Kernel	Version 7.0 rc2
Linux Linux Kernel	Version 7.0 rc3