Linux Kernel Vulnerability in RTL8723BS Driver by The Linux Foundation

CVE-2026-31626

What is CVE-2026-31626?

A vulnerability in the RTL8723BS driver of the Linux kernel has been identified, where the variable 'le_tmp64' is not properly initialized within the 'rtw_BIP_verify()' function. The implementation only copies 6 bytes into an 8-byte variable, leading to two bytes remaining uninitialized. This flaw could potentially lead to unpredictable behavior in the driver, which could compromise system stability and security. Proper initialization of 'le_tmp64' is essential to ensure expected and safe operation of the driver, thereby mitigating risks associated with using uninitialized data.

References