Out-of-Bounds Read Vulnerability in Linux Kernel Affecting RTL8723BS Driver

CVE-2026-90017

What is CVE-2026-90017?

A vulnerability in the Linux kernel's RTL8723BS driver has been identified, where the function rtw_action_frame_parse() does not adequately verify the length of incoming frame data before accessing it. This oversight can allow an attacker to send a maliciously crafted management action frame of a minimal length, resulting in an out-of-bounds read that could lead to unpredictable behavior or exposure of sensitive information. The issue arises from the lack of length verification on the frame_len parameter, which can potentially allow exploitation via user-influenced buffers. It's crucial to implement the necessary checks to ensure secure handling of such data.

References