CVE-2026-64446

A flaw was found in the Linux kernel's rtl8723bs Wi-Fi driver. A local user can exploit this vulnerability by supplying a crafted Wi-Fi Protected Access WPA Information Element IE during a connection request. This can lead to a one-byte heap buffer overflow, potentially causing memory corruption...

CVE-2026-64446

CVE-2026-64446 is a heap buffer overflow in the Linux kernel's rtl8723bs staging driver . In rtw_cfg80211_set_wpa_ie(), the supplicant_ie array is 256 bytes, but the memcpy for WPA/WPA2 IE copies wpa_ielen + 2 bytes where wpa_ielen is an unsigned 8-bit value (max 255). A local user supplying a cr...

CVE-2026-64446

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix heap buffer overflow in rtwcfg80211setwpaie supplicantie is a 256-byte array in struct securitypriv. The WPA and WPA2 IE copy paths use: memcpypadapter-securitypriv.supplicantie, 0, wpaielen + 2; where...