SB2026092824 - Memory leak in Linux kernel rtl8723bs core driver

Description

This security bulletin contains information about 1 vulnerability.

1) Memory leak (CVE-ID: CVE-2026-100076)

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to failure to release management transmit frame and buffer resources in the rtl8723bs management frame transmission paths when handling management frame transmission error conditions. A local user can repeatedly trigger affected error paths to exhaust the management transmit pools and prevent the interface from sending beacons or probe and association responses.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/41b8209376dffbd7b0b85c8bc4697d9166ac62ef
• https://git.kernel.org/stable/c/6c9f6a3b9fdd31a0836b681053155b5997c0156e
• https://git.kernel.org/stable/c/c48e5aa01525577d6b6e782962a5bfb0e1535cb5