An out-of-bounds read vulnerability in the Linux kernel rtl8723bs driver affects multiple kernel branches and poses a high risk of information disclosure or denial of service via malicious Wi-Fi beacons.

This is an out-of-bounds read flaw located in the update_beacon_info function within the staging rtl8723bs wireless driver, triggered by an unauthenticated adjacent attacker sending malformed information elements in beacon frames.

A successful exploit can lead to kernel memory exposure or system crashes, resulting in unexpected node downtime and potential leakage of sensitive kernel memory contents. The CVSS score of 8.1 indicates high severity, primarily driven by the potential for high impacts to confidentiality and availability when processing untrusted wireless management frames.

Immediate Action: Update the Linux kernel to patched upstream versions including 5.15.212, 6.1.178, 6.6.145, 6.12.96, or later depending on the active release series.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or driver-related errors associated with wireless interface operations.

Compensating Controls: Restrict wireless network connectivity to trusted access points and disable the vulnerable rtl8723bs staging driver if wireless functionality is not required.

Public Exploit Available: No

System administrators maintaining affected Linux kernel branches must apply the official upstream patches immediately to prevent potential denial of service conditions and unauthorized memory reads. Prioritize updating kernel packages across all vulnerable deployments utilizing the rtl8723bs wireless driver.