Medium 5.5Published May 6, 2026

CVE-2026-43159staging: rtl8723bs: fix null dereference in find_network

Updated under an hour ago (Oct 27, 2026, 9:23 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix null dereference in find_network The variable pwlan has the possibility of being NULL when passed into rtw_free_network_nolock() which would later dereference the variable.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	554c0a3abf216c991c5ebddcdb2c08689ecd290b builds before 3b1d0c9a1f78836d0bce6fdd37f596f22c19b03e; 554c0a3abf216c991c5ebddcdb2c08689ecd290b builds before 1aa9c59f4b96a9056c02476c7ca89e96d15e0645; 554c0a3abf216c991c5ebddcdb2c08689ecd290b builds before 48b4dec3a8bfd667cd0cd767eaf511176193e9a1; from 554c0a3abf216c991c5ebddcdb2c08689ecd290b before cc3f83b6fb3773ad943365d1cd774b4ec050332e; 554c0a3abf216c991c5ebddcdb2c08689ecd290b builds before 04d24a3654ed195485bc6346a9ef326fc494a34e; from 554c0a3abf216c991c5ebddcdb2c08689ecd290b before 677490a6bd4c63acdf6f48e4aaf6a23d7e6a446f; 554c0a3abf216c991c5ebddcdb2c08689ecd290b builds before 7fa16ffed2b9d9d44940990c1f31159770769aeb; from 554c0a3abf216c991c5ebddcdb2c08689ecd290b before 41460a19654c32d39fd0e3a3671cd8d4b7b8479f	CNA record
linux linux_kernel linux:linux_kernel	from 4.12 before 5.10.253; from 5.11 before 5.15.202; from 5.16 before 6.1.165; from 6.2 before 6.6.128; from 6.7 before 6.12.75; from 6.13 before 6.18.16; from 6.19 before 6.19.6	NVD

References

References

https://git.kernel.org/stable/c/3b1d0c9a1f78836d0bce6fdd37f596f22c19b03e	patch
https://git.kernel.org/stable/c/1aa9c59f4b96a9056c02476c7ca89e96d15e0645	patch
https://git.kernel.org/stable/c/48b4dec3a8bfd667cd0cd767eaf511176193e9a1	patch
https://git.kernel.org/stable/c/cc3f83b6fb3773ad943365d1cd774b4ec050332e	patch
https://git.kernel.org/stable/c/04d24a3654ed195485bc6346a9ef326fc494a34e	patch
https://git.kernel.org/stable/c/677490a6bd4c63acdf6f48e4aaf6a23d7e6a446f	patch
https://git.kernel.org/stable/c/7fa16ffed2b9d9d44940990c1f31159770769aeb	patch
https://git.kernel.org/stable/c/41460a19654c32d39fd0e3a3671cd8d4b7b8479f	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.