Lucene search
+L

10 matches found

OSV
OSV
•added 2026/09/16 11:17 a.m.•9 views

AZL-101678 CVE-2026-90018 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read / stack overflow in rtwgetwpsattr rtwgetwpsattr walks WPS attributes inside a WPS IE taken from a wireless management frame. For each candidate attribute it only checks that the fixed 4-byte...

8.8CVSS6.1AI score0.0052EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 11:17 a.m.•11 views

CVE-2026-90018

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read / stack overflow in rtwgetwpsattr rtwgetwpsattr walks WPS attributes inside a WPS IE taken from a wireless management frame. For each candidate attribute it only checks that the fixed 4-byte...

8.8CVSS0.0052EPSS
SaveExploits0References7
OSV
OSV
•added 2026/09/16 11:17 a.m.•13 views

DEBIAN-CVE-2026-90018

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read / stack overflow in rtwgetwpsattr rtwgetwpsattr walks WPS attributes inside a WPS IE taken from a wireless management frame. For each candidate attribute it only checks that the fixed 4-byte...

8.8CVSS6.3AI score0.0052EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/16 10:33 a.m.•15 views

EUVD-2026-80626

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read / stack overflow in rtwgetwpsattr rtwgetwpsattr walks WPS attributes inside a WPS IE taken from a wireless management frame. For each candidate attribute it only checks that the fixed 4-byte...

8.8CVSS6.1AI score0.0052EPSS
SaveExploits0References7
CVE
CVE
•added 2026/09/16 10:33 a.m.•31 views

CVE-2026-90018

CVE-2026-90018 affects the rtl8723bs staging driver in the Linux kernel . The root cause is a missing bounds check on variable-length WPS attribute data in rtw_get_wps_attr(): the 4-byte header is validated against the Information Element length, but the attacker-controlled attr_data_len (up to 6...

8.8CVSS6.1AI score0.0052EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/09/16 10:33 a.m.•41 views

CVE-2026-90018 staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr()

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read / stack overflow in rtwgetwpsattr rtwgetwpsattr walks WPS attributes inside a WPS IE taken from a wireless management frame. For each candidate attribute it only checks that the fixed 4-byte...

8.8CVSS0.0052EPSS
SaveExploits0References7
OSV
OSV
•added 2026/09/16 10:33 a.m.•12 views

CVE-2026-90018 staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr()

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read / stack overflow in rtwgetwpsattr rtwgetwpsattr walks WPS attributes inside a WPS IE taken from a wireless management frame. For each candidate attribute it only checks that the fixed 4-byte...

8.8CVSS6AI score
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2026/09/16 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2026-90018

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: rtl8723bs: fix OOB read / stack overflow in rtwgetwpsattr rtwgetwpsattr walks WPS attributes inside a WPS IE taken from a wireless management frame. F...

8.8CVSS6AI score0.0052EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•2 views

CVE-2026-90018: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read / stack overflow in rtwgetwpsattr rtwgetwpsattr walks WPS attributes inside a WPS IE taken from a wireless management frame. For each candidate attribute it only checks that the fixed 4-byte...

8.8CVSS6.1AI score0.0052EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/25 12:00 a.m.•1 views

CVE-2026-64441: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in rtwgetsecie, rtwgetwapiie, and rtwgetwpsattr Three IE/attribute parsing functions have missing bounds checks. rtwgetsecie and rtwgetwapiie iterate over a raw IE buffer without verifying that t...

8.8CVSS6AI score0.00403EPSS
SaveExploits0References9
Rows per page
Query Builder