PT-2026-39047 · Linux · Linux Kernel

Published 2026-05-08 · Updated 2026-05-15 · CVE-2026-43386

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read exists in the rtw restruct wmm ie() function within the rtl8723bs staging driver. The issue occurs because the code accesses the in ie[i + 5] array element before verifying if the index is within the bounds of in len.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-43386

Affected Products

Linux Kernel

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2026-43386 · Security Note
• https://twitter.com/hetmehtaa/status/2055151398283837677 · Twitter Post
• https://git.kernel.org/stable/c/768f25613a9fe6766d15a4a72979657adfc1c6d8 · Note
• https://git.kernel.org/stable/c/e14a1148f02e8cf1ca380d57e4b95ca36c97f45d · Note
• https://twitter.com/infoflowcloud/status/2052769680784253211 · Twitter Post
• https://git.kernel.org/stable/c/4dd2d9cf563c54e09d5f7eacf95c5b8f538b513b · Note
• https://git.kernel.org/stable/c/209644e25757c499e1c1f08c071ea0386d4448b6 · Note
• https://git.kernel.org/stable/c/d97fc1b29513010b60fde874c7f0ba816744e18c · Note
• https://git.kernel.org/stable/c/6ff2243d5e05a5239e39d4ba61d96b0ea3bf7259 · Note
• https://git.kernel.org/stable/c/12cc6e8f8d4245b7b5a408c6fc8ab1d098d67020 · Note
• https://git.kernel.org/stable/c/a75281626fc8fa6dc6c9cc314ee423e8bc45203b · Note
• https://twitter.com/CVEnew/status/2052767698795606383 · Twitter Post