PT-2025-51669 · Rtl8723Bs+4 · Rtl8723Bs+4
Published
2025-11-20
·
Updated
2026-05-11
·
CVE-2025-68256
CVSS v2.0
2.7
Low
| Vector | AV:A/AC:L/Au:S/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
An issue exists in the Linux kernel related to the
rtl8723bs driver. The rtw get ie() parser does not properly validate the length of Information Element (IE) data within network frames. Specifically, it trusts the length byte of each IE without verifying that the IE body fits within the remaining frame buffer. A crafted frame with a malformed IE length can cause the parser to read beyond the buffer boundaries, leading to out-of-bounds reads or an infinite loop. The fix involves validating that the offset plus the IE length does not exceed the buffer limit before processing the IE.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Ubuntu
Rtl8723Bs