vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-53178

staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction

HIGH
8.1
CVSS Score
Published: June 25, 2026 at 08:38 AM UTC
Updated: October 21, 2026 at 01:19 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH8.1
Exploit prediction
EPSS 0.4%

Description

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction Add guards to ensure ie_length is large enough before subtracting fixed IE offsets to prevent unsigned integer underflow.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
5.15 ≤ v < 7.0.137.17.1 rc17.1 rc27.1 rc37.1 rc47.1 rc57.1 rc67.1 rc7d3fcee1b78a533c256077f1300dd236801397cf7
Vendor states this is fixed in 542d65a6dbd9733baab96313c9fe76a76e93f484 (fixed)
Vendor states this is fixed in 637e0ea73f690028796ee2fc72a2ac4ec32968c6 (fixed)
Vendor states this is fixed in 88e994c57a79f62d5338231d8d37ee8dd98baffe (fixed)
Vendor states this is fixed in 5.15 (unaffected)
Vendor states this is fixed in 6.12.114 (unaffected)
Vendor states this is fixed in 6.18.52 (unaffected)
Vendor states this is fixed in 6.6.160 (unaffected)
Vendor states this is fixed in 7.0.13 (unaffected)
Vendor states this is fixed in 7.1 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (5)

Patch
Source: cverecord
https://git.kernel.org/stable/c/542d65a6dbd9733baab96313c9fe76a76e93f484
Patch
Source: cverecord
https://git.kernel.org/stable/c/88e994c57a79f62d5338231d8d37ee8dd98baffe
Source: cverecord
https://git.kernel.org/stable/c/637e0ea73f690028796ee2fc72a2ac4ec32968c6
Source: cverecord
https://git.kernel.org/stable/c/18143799ad51a32b1351e4e1591b6285a0a9d7dd
Source: cverecord
https://git.kernel.org/stable/c/8863ac3a4fedf86b0ef5b8ecc37fbaa52f2a8160

CVSS

8.1HIGHLinux
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-191

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card