PT-2026-39047 · Linux · Linux Kernel

CVE-2026-43386 · Published 2026-05-08 · Updated 2026-07-20

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read exists in the rtw restruct wmm ie() function within the rtl8723bs staging driver. The issue occurs because the code accesses the in ie[i + 5] array element before verifying if the index is within the bounds of in len.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-43386

USN-8567-1

Affected Products

Linux Kernel

References · 916

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43386.json · Exploit
• https://ubuntu.com/security/CVE-2026-52992 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-45842 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-52920 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23339 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-53122 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46078 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46179 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43436 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23460 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43451 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31545 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23330 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31583 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23227 · Vendor Advisory