CVE-2026-64536

In the Linux kernel staging area for rtl8723bs, CVE-2026-64536 concerns OOB reads in is_ap_in_tkip() IE loop. The code iterates IEs and dereferences headers/payloads without verifying sufficient remaining bytes: pIE->element_id and pIE->length read without i + sizeof(*pIE) data + 12 and pIE...

EUVD-2026-49114

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in isapintkip IE loop The loop in isapintkip iterates over IEs without verifying that enough bytes remain before dereferencing the IE header or its payload: - pIE-elementid and pIE-length are rea...