A critical buffer overflow vulnerability in the Linux rtl8723bs Wi-Fi driver allows an attacker within radio range to execute arbitrary code or crash the system.

This is a memory corruption vulnerability involving an integer underflow and out-of-bounds read within the OnAuth() function of the rtl8723bs driver. An unauthenticated attacker within radio range can send malformed 802.11 authentication frames to trigger this flaw.

The CVSS score of 8.8 reflects the high risk posed by this vulnerability, particularly for mobile or embedded devices using the rtl8723bs chipset. An attacker could achieve remote code execution, leading to a complete compromise of the wireless device or significant denial-of-service, potentially impacting corporate network integrity.

Immediate Action: Update the Linux kernel to versions 5.10.261, 5.15.212, 6.1.178, 6.6.145, or later.

Proactive Monitoring: Monitor wireless interface logs for abnormal authentication patterns or frequent driver-related crashes.

Compensating Controls: If the kernel cannot be updated, disable the rtl8723bs driver or restrict the use of the affected wireless hardware in high-security environments.

Public Exploit Available: Unknown

Organizations should prioritize patching systems running the rtl8723bs driver. Given that this vulnerability can be triggered by unauthenticated attackers within radio range, it represents a significant security risk that requires urgent attention.