01 Record

CVE-2026-64441

staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()

HighPUBLISHEDCNA: Linux

CNA base score8.8 CVSS v3.xCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.25% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 17.2% of scored records. A rank, not a probability.

NVD base score

8.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-10-19.

Red Hat severity

Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-07-25 08:51Z3 MO AGO

Last updated

2026-10-19 20:38Z9 DAYS AGO

Reserved

2026-07-19

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 8.8)

CNA CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-125Out-of-bounds ReadBase

Data version

5.2

Document digest

8541f018598a57d36b8133c76f4c69418457943e5d3d622df8839f4ddd45738e

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux554c0a3abf216c991c5ebddcdb2c08689ecd290b to < efa27d487abcdec79669a60a6d94d5d6eceb7c1d, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to < 2ea1ce30ead61589214240e8d33d96310fd613e5, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to < b27ecba3196f6c14e3809595ebd69c0c2392512a, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to < 6ab1161e539fb7a1c8b35ff5a6ced4702e855b9c, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to < 4b51ee8a40fe47864197d73cc02b191de7a6b072, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to < 729c4e72563bda0f1725db1db9ea08df06f41d9b, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to < 1463ca3ec6601cbb097d8d87dbf5dcf1cb86a344, 4.12—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/efa27d487abcdec79669a60a6d94d5d6eceb7c1d
git.kernel.orghttps://git.kernel.org/stable/c/2ea1ce30ead61589214240e8d33d96310fd613e5
git.kernel.orghttps://git.kernel.org/stable/c/b27ecba3196f6c14e3809595ebd69c0c2392512a
git.kernel.orghttps://git.kernel.org/stable/c/6ab1161e539fb7a1c8b35ff5a6ced4702e855b9c
git.kernel.orghttps://git.kernel.org/stable/c/4b51ee8a40fe47864197d73cc02b191de7a6b072
git.kernel.orghttps://git.kernel.org/stable/c/729c4e72563bda0f1725db1db9ea08df06f41d9b
git.kernel.orghttps://git.kernel.org/stable/c/1463ca3ec6601cbb097d8d87dbf5dcf1cb86a344

07 Fixed in

Debian 12

linux
Fixed in 6.1.180-1
linux-6.12
Fixed in 6.12.100-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.100-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.1.4-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.