CVE-2026-64440
8.1Linux · Linux Kernel
An out-of-bounds write vulnerability exists in the Linux kernel rtl8723bs wireless staging driver via unvalidated 802.11 association response frames.
Executive summary
An out-of-bounds write vulnerability in the Linux kernel wireless staging driver allows adjacent attackers to cause memory corruption, integrity loss, or denial of service.
Vulnerability
This is an out-of-bounds write flaw located in the HT_caps_handler function of the rtl8723bs wireless driver, where an unauthenticated adjacent attacker using a malicious access point can supply an unvalidated length parameter.
Business impact
A successful exploit can compromise system stability and data integrity, potentially leading to kernel crashes or arbitrary memory overwrites on affected hosts. Given the CVSS score of 8.1, this high severity vulnerability poses a significant operational risk to wireless infrastructure utilizing the vulnerable driver.
Remediation
Immediate Action: Update the Linux kernel to version 5.15.212, 6.1.178, 6.6.145, or later where the upstream fix is integrated.
Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or unexpected reboots associated with wireless driver modules.
Compensating Controls: Restrict wireless network access to trusted access points and disable the vulnerable rtl8723bs staging driver module if wireless functionality is not required.
Exploitation status
Public Exploit Available: No
Analyst recommendation
Administrators must treat this high severity kernel vulnerability with urgency by applying the official kernel patches immediately. Ensuring that affected staging drivers are updated or disabled will prevent potential adjacent memory corruption and maintain overall system security.