VDB

CVE-2026-43386

CVE-2026-43386 PUBLISHED

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie The current code checks 'i + 5 < in_len' at the end of the if statement. However, it accesses 'in_ie[i + 5]' before that check, which can lead to an out-of-bounds read. Move the length check to the beginning of the conditional to ensure the index is within bounds before accessing the array.

EPSS 0.01% · 2.5th percentile

Risk Scores

EPSS Score
0.01%
2.5th percentile

Affected Products

VendorProductVersions
LinuxLinux6.1.167, 5.15.203, 6.6.130
linuxlinux_kernel4.12, 4.12, 4.12

Timeline

  • May 8, 2026 CVE Published
  • May 8, 2026 Security Advisory
  • May 18, 2026 EPSS Score
  • May 19, 2026 EPSS Score
  • May 20, 2026 EPSS Score
  • May 21, 2026 EPSS Score
  • May 22, 2026 EPSS Score
  • May 23, 2026 EPSS Score
  • May 24, 2026 EPSS Score
  • May 25, 2026 EPSS Score
  • May 26, 2026 EPSS Score
  • May 27, 2026 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›