Out-of-Bounds Read Vulnerability in Linux Kernel Affecting RTL8723BS Driver

CVE-2026-90016

What is CVE-2026-90016?

A vulnerability in the RTL8723BS driver of the Linux kernel allows for out-of-bounds read scenarios. The issue arises when the function rtw_restruct_wmm_ie fails to adequately check boundaries before accessing the in_ie buffer. Specifically, if a condition near the end of the buffer is not met, subsequent operations could lead to read attempts beyond allocated memory, potentially exposing sensitive information. Developers have addressed this flaw in a recent commit by introducing an explicit bounds check to prevent such occurrences, enhancing the security integrity of systems utilizing affected kernel versions.

References