High 8.1Published Jun 25, 2026

CVE-2026-53178staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction

Updated under an hour ago (Oct 26, 2026, 10:50 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction Add guards to ensure ie_length is large enough before subtracting fixed IE offsets to prevent unsigned integer underflow.

CVSS: 8.1 HIGH (v3.1, CNA)CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 21, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from d3fcee1b78a533c256077f1300dd236801397cf7 before 18143799ad51a32b1351e4e1591b6285a0a9d7dd; from d3fcee1b78a533c256077f1300dd236801397cf7 before 8863ac3a4fedf86b0ef5b8ecc37fbaa52f2a8160; from d3fcee1b78a533c256077f1300dd236801397cf7 before 637e0ea73f690028796ee2fc72a2ac4ec32968c6; from d3fcee1b78a533c256077f1300dd236801397cf7 before 542d65a6dbd9733baab96313c9fe76a76e93f484; from d3fcee1b78a533c256077f1300dd236801397cf7 before 88e994c57a79f62d5338231d8d37ee8dd98baffe	CNA record
linux linux_kernel linux:linux_kernel	from 5.15 before 7.0.13; 7.1; 7.1; 7.1; 7.1; 7.1; 7.1; 7.1	NVD

References

References

https://git.kernel.org/stable/c/18143799ad51a32b1351e4e1591b6285a0a9d7dd
https://git.kernel.org/stable/c/8863ac3a4fedf86b0ef5b8ecc37fbaa52f2a8160
https://git.kernel.org/stable/c/637e0ea73f690028796ee2fc72a2ac4ec32968c6
https://git.kernel.org/stable/c/542d65a6dbd9733baab96313c9fe76a76e93f484	patch
https://git.kernel.org/stable/c/88e994c57a79f62d5338231d8d37ee8dd98baffe	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.