CVE-2026-74649

CVE-2026-74649 affects the Linux kernel staging driver rtl8723bs . The WEP shared-key authentication handler in OnAuthClient() copies the challenge-text element into a fixed 128-byte chg_txt buffer using an attacker-controlled length (up to 255 bytes) without validation. A malicious AP can send a...

CVE-2026-74649 staging: rtl8723bs: fix missing shared-key auth challenge length check

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix missing shared-key auth challenge length check The WEP shared-key authentication handler uses the challenge-text element's attacker-controlled length without checking it against the fixed 128-byte chgtxt...

PT-2026-79654

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix missing shared-key auth challenge length check The WEP shared-key authentication handler uses the challenge-text element's attacker-controlled length without checking it against the fixed 128-byte chg txt...