CVE-2025-68255 staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing

🗓️ 16 Dec 2025 14:44:58Reported by LinuxType

Staging: rtl8723bs fixes stack overflow in OnAssocReq IE parsing by clamping IE length to 16 bytes and correcting Extended Supported Rates bounds.

Reporter	Title	Published	Views	Family All 208
ATTACKERKB	CVE-2025-68255	16 Dec 202514:44	–	attackerkb
AstraLinux	Astra Linux - уязвимость в linux-5.10, linux-6.1	20 May 202605:53	–	astralinux
Circl	CVE-2025-68255	16 Dec 202516:04	–	circl
CNNVD	Linux kernel 安全漏洞	16 Dec 202500:00	–	cnnvd
CVE	CVE-2025-68255	16 Dec 202514:44	–	cve
Debian	[SECURITY] [DLA 4475-1] linux security update	11 Feb 202612:47	–	debian
Debian	[SECURITY] [DLA 4476-1] linux-6.1 security update	11 Feb 202612:48	–	debian
Debian	[SECURITY] [DSA 6127-1] linux security update	9 Feb 202619:19	–	debian
Debian CVE	CVE-2025-68255	16 Dec 202514:44	–	debiancve
Tenable Nessus	Debian dla-4475 : ata-modules-5.10.0-35-armmp-di - security update	11 Feb 202600:00	–	nessus

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/staging/rtl8723bs/core/rtw_mlme_ext.c"
    ],
    "versions": [
      {
        "version": "554c0a3abf216c991c5ebddcdb2c08689ecd290b",
        "lessThan": "49b7806851f93fd342838c93f4f765e0cc5029b0",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "554c0a3abf216c991c5ebddcdb2c08689ecd290b",
        "lessThan": "4445adedae770037078803d1ce41f9e88a1944b6",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "554c0a3abf216c991c5ebddcdb2c08689ecd290b",
        "lessThan": "d129dc2a5d59b4d9cd2cc0b6eeb04df8461199f0",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "554c0a3abf216c991c5ebddcdb2c08689ecd290b",
        "lessThan": "34620eb602aa432f090b2b784ee5c5070fb16cf9",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "554c0a3abf216c991c5ebddcdb2c08689ecd290b",
        "lessThan": "61871c83259a511980ec2664964cecc69005398b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "554c0a3abf216c991c5ebddcdb2c08689ecd290b",
        "lessThan": "25411f5fcf5743131158f337c99c2bbf3f8477f5",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "554c0a3abf216c991c5ebddcdb2c08689ecd290b",
        "lessThan": "e841d8ea722315b781c4fc5bf4f7670fbca88875",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "554c0a3abf216c991c5ebddcdb2c08689ecd290b",
        "lessThan": "6ef0e1c10455927867cac8f0ed6b49f328f8cf95",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/staging/rtl8723bs/core/rtw_mlme_ext.c"
    ],
    "versions": [
      {
        "version": "4.12",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "4.12",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.248",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.198",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.160",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.120",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.62",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.17.12",
        "lessThanOrEqual": "6.17.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.1",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.19",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/25411f5fcf5743131158f337c99c2bbf3f8477f5
git	www.git.kernel.org/stable/c/49b7806851f93fd342838c93f4f765e0cc5029b0
git	www.git.kernel.org/stable/c/d129dc2a5d59b4d9cd2cc0b6eeb04df8461199f0
git	www.git.kernel.org/stable/c/4445adedae770037078803d1ce41f9e88a1944b6
git	www.git.kernel.org/stable/c/6ef0e1c10455927867cac8f0ed6b49f328f8cf95
git	www.git.kernel.org/stable/c/61871c83259a511980ec2664964cecc69005398b
git	www.git.kernel.org/stable/c/34620eb602aa432f090b2b784ee5c5070fb16cf9
git	www.git.kernel.org/stable/c/e841d8ea722315b781c4fc5bf4f7670fbca88875

11 May 2026 21:49Current

EPSS0.00083