CVE-2026-64446

A flaw was found in the Linux kernel's rtl8723bs Wi-Fi driver. A local user can exploit this vulnerability by supplying a crafted Wi-Fi Protected Access WPA Information Element IE during a connection request. This can lead to a one-byte heap buffer overflow, potentially causing memory corruption...

CVE-2026-64446

The connected sources confirm a concrete vulnerability in the Linux kernel’s rtl8723bs staging driver: a heap buffer overflow in rtw_cfg80211_set_wpa_ie() due to copying a WPA/WPA2 IE into a 256-byte supplicant_ie. If a 255-byte WPA IE is supplied, wpa_ielen+2 becomes 257, overflowing into adjace...